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RELIABILITY - CRITERIA AND PRACTICE 
etn ener siesta acai deeded Sotic nachna 
INTRODUCTION 


Reliability is one of the major factors in the 
planning, design, operation and maintenance of electric 
power systems and must receive attention through the 
full life cycle of planning any Paci sicy at Lees 
however, only one of the factors to be considered and 
reliability standards therefore represent a compromise 
with other factors such as Safety, cost, availability 
of capital and environmental constraints. 


This memorandum discusses some general aspects of 
reliability and then describes the practices and 
criteria followed by Ontario Hydro in providing for 
reliability in the generation and bulk power 
transmission facilities, 


Ontario Hydro System 


Today's generating system comprises 40 generating 
stations from 10 MW to 2,431 MW in capacity and a 
number of smaller stations. Most stations have several 
generating units. 


The bulk power transmission system comprises a network 
of transmission lines at 500 kV, 230 kV or 115 RV; 
connecting the generating stations to the load areas 
and to each other, effectively integrating them into a 
Single system. The network includes several hundred 
individual circuits. The complexity of this network is 
illustrated in Figure 10-1, which shows the 500 kV and 
230 kV lines in the southern section of Ontario Hydro's 
East System, 


The protection and control systems are an integral part 
of the generating and transmission facilities and are 
of major importance in determining system reliability. 


DEFINITIONS AND GENERAL CONSIDERATIONS 
eee eee 


The Meaning of Reliability 


The reliability of an electric supply system may be 
defined in general terms as the degree of continuity of 
full electric power supply delivered to the user's 
premises. Perfect reliability would mean that full 
electric power supply is available 100% of the time, 
i.@. 8,700 hours ingasvear. 
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Some users experience reliability better than and some 
worse than the average for the whole power supply 
System. However, the following examples may serve to 
place in perspective the existing reliability of 
electric power supply systems: 


(a) 


The low voltage (13, 28 or 44 kV) buses of step- 
down transformer stations and large industrial 
customers supplied at 115 kV or 230 kV by Ontario 
Hydro experienced interruptions totalling 22 
Minutes on the average in 1974 (1). Reliability 
on average was thus 99.9958%. This reflects the 
performance of the generation and bulk power 
transmission systems, 


Data have been accumulated for rural customers in 
nine Ontario Hydro Areas, covering periods from 18 
to 55 months ending December 31, 1974. These 
indicate an average annual duration of 
interruption per customer of 182 minutes (2). 
Reliability on average was 99.9658%. This 
reflects the performance of the generation, bulk 
power transmission, subtransmission and rural 
distribution systems. 


The survey of distribution system performance of 
Canadian utilities conducted annually by the 
Canadial Electrical Association showed an average 
total duration of interruption per customer of 158 
minutes in 1972 and 40 9 minutes in 1973 (3). 
Reliability thus was 99.9699% in 1972 and 99.9222% 
SNE LS fon 


Reliability to the Electric VELrlitcy 


The electric utility is concerned with planning, 
designing, operating and maintaining its power 
Supply system to provide an acceptable level of 
reliability to the users. This requires that 
standards of reliability be specified and used in 
development of the system and its component parts. 


To be used in mathematical calculations, 
reliability must be defined as precisely as 
possible. According to a standard definition, 
reliability is "the probability of a device 
performing its purpose adequately for the period 
of time intended under the operating conditions 
encountered." Probability is a key word in the 
definition because probability mathematics is used 
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to evaluate reliability, and the answers are not 
intended to state whether or not a given piece of 
equipment will be available at a given time, but 
only the probability that it will be available. 


Because of the complexity of power systems it is 
not practicable to apply this strictly 
mathematical definition to overall power system 
reliability. Accordingly, power system 
reliability is divided into two aspects: 
availability which is amenable to probability 
analysis, and security which is not. 


(i) Availability 


The availability of the individual elements 
(generators, transmission lines, 
transformers, circuit breakers, etc) of a 
power system is the probability that the 
individual elements will be in an operable 
Concition 21.6. not out,of.servicesdue toa 
fault, equipment failure, incorrect operation 
or for maintenance. 


Ce) Security 


System security is a measure of the ability 
of the system to withstand the stresses 
imposed by sudden shocks, such as loss of 
large generators, or a heavily-loaded 
transmission line. A transmission system may 
have adequate availability, that is, there 
may be enough elements to supply the load 
under normal steady state conditions. It may 
even have adequate availability to supply 
Steady state loads with one or more elements 
out of service. However, if an element is 
forced out of service by a fault, there may 
be a severe stress placed on the system for a 
few seconds because of changes or swings in 
power flows occasioned by the fault. The 
system has security if it is able to sustain 
these power swings and eventually settle down 
to an acceptable new steady state. It does 
not have security if the power swings 
increase in amplitude until instability 
results, leading to disconnection of 
generators and loss of ability to supply some 
of the loads. 
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(b) 


System security can be calculated for any 
particular fault. It is impractical, 
however, to treat system security on a 
probability basis for all faults. 


Reliability to the User 


The user requires electricity only as a means to 
accomplish some particular purpose at some 
particular time. Hence, the user's assessment of 
reliability is probably based not on the degree of 
continuity of supply but on its complementary 
aspects; the occasions on which the supply of 
power is interrupted completely or reduced partly 
(e.g. by voltage reductions or voluntary or 
enforced reductions in power use) and the 
resultant interference with his planned 
activities. 


It is believed that users of electricity are 
affected by the following aspects of power supply 
interruptions and reductions: 


(i) Their frequency, that is the number of 
interruptions or reductions per month or per 
year. Frequent occurrences are more serious 
than infrequent ones. 


Cit) ss thetrecduration, that 1S the Wength of time 
they last. Long interruptions or reductions 
are more serious than short ones. 


(1aP) tietrewarning, chat 1S) do they begin without 


notice or are the users forewarned. 
Interruptions or reductions which occur with 
no notice or inadequate notice are more 
serious than ones occurring with adequate 
notice. 


(iv) Their area, that is are they widesvread or 
confined to a small locality. To the 


community at large widespread occurrences are 
more serious than local ones. 


(yj winelociming,eciat ts scostney occurein the 
day or at night, on working days or weekends, 
in winter or summer. The effect depends on 
the user's activities at the time. 
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(vi) Their cause, that is do they result from 
factors which are capable of being largely 
Overcome by the electric supply utility or do 
they result from factors beyond the utility's 
control (e.g. floods, tornadoes, ice storms, 
etc). 


Appropriate Level of Reliability 


(a) 


Effects of Unreliability 


The full effects of unreliability include not only 
those which each user sees as applying to himself 
in isolation but also the composite effect upon 
the community. For example, widespread and 
frequent outages may affect a Manufacturer, not 
only because his own production capability is 
decreased, but also because the interruptions may 
interfere with his sources and costs of materials 
and with markets for his products. As another 
example, a worker in the manufacturing firm may 
suffer more financial loss as a result of 
interruptions in electric supply to that firs Lt 
it should result in lay-offs, than as a result of 
interruptions in supply to his residence. 


Present Practices 
eee ee ee re wae ene 


Ontario Hydro and other utilities have evolved 
reliability criteria and practices for the 
planning, design, operation, and maintenance of 
power supply systems by consideration of 
experience, of actual system verformance and of 
the cost of improvement in that performance. 

These criteria provide a high and generally 
Satisfactory reliability to users. In Cur acess 
believed that the users have progressively adapted 
their production operations and their way of life 
to depend on this level of reliability. 


It has been Ontario Hydro's experience that many 
customers, including large industries, expect a 
high level of reliability and complain if they do 
not receive it. However, the submissions to the 
Ontario Energy Board's 1974 hearings on Ontario 
Hydro's Expansion Program, and to the hearings for 
1975 and 1976 Rates, indicated that various users 
of electricity hold conflicting opinions about 
continuing the present levels of reliability of 
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the electric power supply system. Most of the 


municipal electric utilities favoured continuance 
of present reliability levels, but some 
municipalities, some industrial users and certain 
special interest groups suggested that the present 
levels are too high and should be lowered to 
reduce the cost of electric power. 


(c) Theoretical Optimum 


In theory, one could plan an economically optimum 
power system by balancing the value of increased 
reliability to users and the cost of providing 
increased reliability in the power supply system. 
However, it is not possible to do this for the 
following reasons: 


(i) No means exist to compute within reasonable 
error the degree of reliability of all the 
individual factors affecting a power system 
and hence the reliability of supply of power 
and energy to a user at a particular point 
within the system. Work is proceeding on 
methods of doing this. However, the sheer 
magnitude of the problem of assessing all 
causes and effects of outages on a large 
diversified power system such as that. of 
Ontario Hydro may make it impractical to 
calculate the reliability of supply to 
specific customers or groups of customers. 


(ii) The monetary and non-monetary value of 


various degrees of reliability of supply of 
power and energy to users is not yet known. 
Some benefits of reliability (or costs of 
unreliability) to some users are 
quantifiable, e.g. production losses and 
costs arising from an interruption. Other 
benefits are difficult to assess and 
quantify, e.g. the value of personal comfort 
or safety. 


Studies of Cost of Interruptions to Customers 


Utilities in several European countries have 
investigated the cost of interruption to various 
classes of users and have published the results of 
their studies. (References 4,5). The published 
material gives considerable detail of the 
assumptions and methods used in determining the 
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L cost of interruptions. It includes examples to 

2 illustrate how this information could be applied; 
. it does not give cases where the information has 

4 actually been used in making decisions on system 

5 development. 

6 4 

7 Also in 1972 the Institute of Electrical and 

8 Electronic Engineers conducted a survey of 

9 reliability in 68 industrial plants in the USA and 
10 Canada. (Reference 6). This provided some data on 
Ll the cost of interruptions for 41 plants tir9 

12 industries. 

i (e) Ontario Hydro Reliability Study 

: In 1975, Ontario Hydro initiated a program to 

17 study various aspects of system reliability. The 
18 program is directed by a Coordinating Committee on 
19 Reliability, consisting of senior managers. 

70 Organization of the study is shown in Figure 10-2. 
et The program is intended to provide information on 
22 the value of reliability of electric supply to 

23 customers, and to develop improved methods for 

ee applying this information to planning the power 

25 Supply system. It thus represents a step toward 
26 development of the "Theoretical Optimum" level of 
“e reliability as diseussed-in 10.21.2- {c), 

29 Studies of Customer Viewpoint and Peak and Energy 
30 Load Reduction will be completed in stages through 
31 1976 and 1977; System Reliability will be a 

ae continuing activity. 

34 Progress in the work is indicated by the 

35 following: 

36 

37 (i) A survey of customers in London was carried 
38 out to determine the costs and other effects 
39 of a prolonged interruption which occurred in 
40 July ,, 1975. A report of the findings*has 

41 been completed. (Reference 7) 

42 

43 (ii) A survey has been carried out to determine 

44 the effect of interruptions on "Large Users" 
45 (i.e. with demand 5000 kW or over) served by 
46 Ontario Hydro or the municipal electric 

47 utilities. The survey covered all users in 
48 thas caregory, auroral of «about. 20g. oA 

49 report on the findings is scheduled for 1976. 
50 
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(g) 


(iii) Similar surveys have been planned to cover 


other customer categories, e.g. Residential, 
Manufacturing, Farm, Commercial, by the end 
of*1977. 


(iv) Work on reliability methods has included 
Ontario Hydro's participation in a project of 
the Northeast Power Coordinating Council to 
develop a method of applying probability 
techniques to the bulk power system, 
including generation and transmission. 
Initial versions of this method will be 
available for testing in 1976 but much 
development work remains to be done. This is 
discussed more fully in Section 10.4.5(b) and 
Appendix 10-0. 


Effective Time for Planning Decisions 
Seertorsriebanatate ee Stee ee el Bee ws 4 ONS, 


On a site already owned, and whose physical and 
environmental aspects are already known, it now 
takes about eight years to construct and bring 
into service the first unit at a new thermal 
generating station for which all approvals have 
been obtained. If a new site must be acquired the 
corresponding period is at least twelve to 
thirteen years. It takes eight or more years to 
establish major new transmission and terminal 
facilities for which routes and sites have yet to 
be acquired. Thus current planning deals with 
facilities coming into service eight or more years 
ahead, 


Therefore the effect of a change in reliability 
criteria may not be felt by the users for eight or 
more years. However, if the results are found to 
be undesirable, then it may be another eight or 
more years before the situation can be corrected. 
This long lead-time makes it undesirable to reduce 
Significantly criteria which have been developed 
Over many years and on which users have come to 
depend. 


Future Developments 
DR east Ba fe ad ath et Sh 


There will undoubtedly be continued improvement in 
the ability to calculate the reliability of the 
System, and to make more rigorous calculations of 
the probable consequence to users of changes in 
reliability criteria. Also, experience with lower 
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Number 


1Oe2e3 


levels of reliability may be gained as it may not 
be possible to maintain present levels. 


Calculations and experience, however, will remain 
only as a guide to, and not a substitute fon; 
judgement in the choice of reliability level. 
These judgements must in turn be translated into 
criteria by which facilities can be planned, 
designed and operated. 


Reguirement for Reserve Facilities 


If all system elements were completely reliable, no 
reserve facilities would be needed, However, under 
actual conditions, the planning of facilities must 
recognize and make provision for the following: 


(a) 


Individual elements in the power supply system 
will become unavailable at times for such reasons 
as: 


(1) Breakdowns of components because of wear and 
tear, inherent defects, weather conditions 
etc. 


(ii) Periodic removal from service for preventive 
maintenance to reduce the incidence of 
unexpected breakdowns. 


(iii) Inadequate supplies of critical materials 


Such as fuel, heavy water, maintenance 
Supplies, etc. 


(iv7)" SStrives’: 
(v) "Debugging" problems with new equipment. 


Typically a large generating unit may have an 
availability in the order of 75%, i.e. the unit 
will be capable of being operated about 75% of the 
time and 25% of the time it will be defective or 
on routine maintenance. Transmission system 
components are removed from service by faults from 
time to time, and must also be periodically 
removed from service for maintenance. In 1974 the 
availability of major transmission lines, 
including the main terminal equipment, averaged 
98.8%. The average circuit is about 40 Miles 
long. 
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(b) Projects may fall behind schedule for many 
reasons, such as construction or purchasing 
difficulties, technological problems, natural 
catastrophes, strikes, or delays in obtaining 
necessary Government approvals. It is unlikely 
that this can be offset by an advance in schedule 
for another project. 


(c) Actual loads may be higher or lower than the 
forecast because of changes in economic conditions 
or new developments in the interval. 


(da) The effective capacity of generating units may be 
less than anticipated due to changes in 
environmental regulations, shortages of fuel or 
heavy water, Strikes, shortages of maintenance 
staflt, etc. 


Users require a level of reliability considerably 
higher than the availability of individual components 
in the power supply system such as generators, lines, 
circuit breakers, transformers, etc. It is therefore 
necessary to have spare components or capacity so that 
the system can continue to supply users satisfactorily 
when some of the individual components are unavailable, 
and to provide for other contingencies of the type 
indicated above. 


Spare generating capacity is usually designated as 
reserve generating capacity and for reasons of economy, 
is operated only when needed. Spare transmission 
facilities, are normally kept in use. This practice 
reduces power losses and increases system reliability. 


Planning for, Reliabigity 


(a) The General Process 


There are differences in the specific processes 
and concerns involved in planning for reliability 
in the generating system and in the bulk power 
transmission system. These will be apparent in 
the subsequent discussion in Sections 10.3 and 
10.4. However, despite these differences in 
detail, planning for reliability in each system 
involves: 


- Similar basic concerns 
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Close coordination of planning, design, 
operation and maintenance 


Uncertainty of future conditions 


These similarities are described further below. 


i) 


ii) 


Similar basic concems 
eee ee ee SORES S 


These are: 


Capability of equipment and structures, 
which is related to the inherent 
mechanical, electrical and structural 
reliability of the components in the 
various elements of the system. It 
reflects the decisions made in design, 
manufacture and construction and the 
capability of the equipment and material 
to perform the duty actually imposed on 
them. If the duty or the operating 
conditions are different than assumed in 
the design their reliability may be 
affected. 


Capability of staff and supvort services 
including the availability and 
competence of the operating staff, the 
extent of maintenance facilities, the 
assistance available from consultants 
and manufacturers for repair and 
improvement of equipment, etc. 


Availability of critical operating and 
maintenance supplies including such 
items as fuel, lubricating oil, spare 
parts, spare transformers, ines 


Unpredictable external factors including 
Strikes, extreme natural phenomenon, 
(e.g. temperatures, lightning, 
tornadoes) malicious damage, changes in 
government regulations, etc 


Close Coordination 
~—_e—~--__-—-:——————— 


Electricity supply systems have grown and are 
expected to continue to grow by the 
systematic addition of facilities in 
relatively small increments. Because of this 
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and of the long useful life of the 
components, planning for reliability is a 
continuing iterative process of consultation 
and coordination among those responsible for 
planning, designing, manufacturing, 
constructing, operating, and maintaining the 
facilities. 


iii) Uncertainty of Future Conditions 


If reliability is to be satisfactory, the 
criteria used in planning must allow for 
various adverse possibilities. The load 
growth may depart from forecast and if higher 
the reliability will be reduced. Projects 
may fall behind schedule so that facilities 
are not available when planned. Also there 
are extreme contingencies which occur 
infrequently (e.g. common cause failures, 
tornadoes). 


Methods of Analysis 


As noted in Section 10.2.2(c), techniques are not 
available to analyze the reliability of the power 
system as a whole. The utility normally analyzes 
the energy supply, generation, bulk power 
transmission and distribution sectors of the 
system individually, dealing only with the most 
significant factors in each sector. These factors 
are respectively: 


= the dependability of primary energy supplies. 


D 


- the availability of generating units. 


- the security and availability of the bulk 
power transmission system. 


- the availability of the distribution system. 


Present practice is to establish criteria for each 
sector, a process which may not ensure the proper 
relative level of reliability in each sector. 
Ontario Hydro's Reliability Study described in 
Section 10.2.2(e) may provide a basis for 
establishing proper relative levels. 
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(c) Administrative Factors 


Some potential causes of unreliability can be 
recognized in the planning process but are not 
susceptible to engineering solutions. Instead 
they require administrative or managerial action. 
These include fuel supply, which has been 
discussed in an earlier memorandum (Reference 8) 
and strikes. They will receive only passing 
discussion in subsequent sections of this 
memorandum. 


, 


PLANNING FOR RELIABILITY IN THE GENERATING SYSTEM 
——— a ERMA LNG Oto EM 


Introduction 


In planning a reliable generation Supply to the 
electric load the two primary factors are the load 
forecast with its inherent uncertainty, and the 
reliability of the electrical generating system. The 
uncertainty in load forecasts is discussed in the 
memorandum on load forecasting This section discusses 
the reliability of the generating system, and the 
interrelation of the load forecast uncertainty and the 
generating system unreliability. 


The generating system includes all generating units 
connected to Ontario Hydro's bulk power transmission 
System. Since the capacity of the transmission between 
the East and West Systems, is limited, it is necessary 
to analyse these systems separately. 


Composition of Generating System 
ere hdd i st lea Ade SL es oD 


Ontario Hydro operates a mixture of hydraulic, fossil- 
Steam, nuclear=-steam and combustion turbine generating 
units in widely distributed generating stations. The 
composition will change with future development. 


a) Existing Generating Resources 


Generating resources on the Ontario Hydro system 
in January 1976 is shown in Appendix 10-A. In 
Summary this was as follows: 
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er 
January Dependable 
Peak Resources 
EY SE Sov R sense eg eee ee ee ee ee 
East System West System 
In MW In % In MW In % 
PM RIE oes an i ees a A a eae hel ne 2 
Hydraulic 5574 B00) 576 64 
Thermal Nuclear 2284 Ls 
Fossil-Steam 8816 48 97 LO sd 
Combustion Turbine 388 2 29 Bez 
Purchases 1196 T= 200 2260 
Total 18258 100.2902 19090 
Appendix 10-A also indicates the energy limitations of 
the hydraulic generation. For the East System the 
dependable energy available from the existing hydraulic 
capacity in January is 2677 average MW i.e., 48% of the 
peak dependable capacity. For the West System, the 
corresponding figures are 325 average MW and 56.5%. 
The hydraulic capacity consists of a large number of 
units ranging in size up to 125 MW. In January 1976 
the largest nuclear-steam or fossil-steam unit size was 
about 500 MW. 
b) Trends in Generating Capacity 
Most of the hydraulic power potential in Ontario 
within economic reach of Ontario load centres has 
been developed. Location, cost and environmental 
concerns make it doubtful that much of the 
remaining potential will be developed; in any case 
this could provide only a fraction of the forecast 
requirements for future capacity. The trend to 
thermal generation in large multi-unit plants, 
already established by construction of Hearn, 
Lakeview, Lambton, Nanticoke, Pickering and 
Lennox, is expected to continue: 
i) Up to 1990 most additions to the East System 
will consist of either fossil-steam units in 
10.0 Page 14 
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the 500-750 MW range or Candu nuclear units 
of 500 MW or 850 Mw Capacity installed in 
four-unit plants. 


ii) Up to 1990 additions to the West System will 
consist of fossil-steam units in the 200-300 
MW range, provided the capacity of the 
interconnection between the East and West 
Systems is not substantially increased. 


Thus, the reliability characteristics of large 
thermal generating units are the predominant 
factor in planning for reliability in the future 
generating system. 


Generating System Characteristics 


Generating units and their components have already been 
described in earlier memoranda. Certain features of 
particular significance to reliability of the unit 
itself or to the system are described in the 

following: 


a) Generating Equipment 


i) Thermal steam generating units comprise a 
large and complex arrangement of main and 
auxiliary equipment which must operate 
Properly and continuously if the unit is to 
provide full output. The units are Subject 
to deratings or total outage from failure in 
any of these many elements; extensive regular 
maintenance is necessary to keep down the 
number of forced outages. 


Also, at fossil-steam plants, large volumes 
of fuel must be transferred from storage to 
the boilers, e.g. a 500 MW unit burns about 
180 tons of coal per hour at full Gapacity. 
Breakdowns in the handling equipment, or such 
conditions as wet or frozen coal may force 
temporary reductions in output, sometimes for 
several units in the same plant. 


In addition large thermal units have definite 
Operating limitations which must be 
recognized. These units are restricted in 
the rate at which they can vary their output 
and require up to thirteen hours to pick up 
load from a cold start. 
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b) 


d) 


e) 


ii) Hydraulic generating units are much simpler 
than thermal units. The turbine and 
generator are much larger physically in 
relation to their capacity. 


Forced outages are relatively infrequent and 
maintenance requirements are less extensive 
than for thermal units. 


Hydraulic generating units can be started 
quickly and loaded quickly and are thus well 
Suited for load following and peaking 
service, 


Governors 


Each generating unit has a governor which 
regulates the flow of energy to the prime mover 
e.g. steam to the turbine, so as to maintain 
generator output at system frequency, and thus to 
match generation to load requirements. Speed of 
governor response is important during system 
disturbances. 


Exciters and Voltage Regulators 
These control generator voltage to predetermined 


levels. Speed of response may be important during 
system disturbances. 


Switching Arrangement 


Each generating station has a switchyard to 
provide the connecting link between generatina 
units and the transmission system. This is 
arranged so that individual units can be connected 
or disconnected without affecting other units, and 
so that the switchgear can be maintained without 
interfering with the operation of generating units 
or transmission lines. 


Relay and Control Systems 


These monitor the operation of the generating unit 
and will shut it down automatically or isolate it 
from the system for conditions outside 
predetermined limits. The primary purpose is to 
avoid or minimize damage to the generating unit. 
Other uses are to detect and avoid potentially 
unsatisfactory operating conditions e.g. excessive 
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£) 


loading, and in minimizing disturbance to the 
system for any fault within the unit. 


Energy Supply 


i) Thermal generating units are dependent on 


Li) 


fuel, supply of which can be disrupted by 
mining or transport strikes, weather 
conditions, embargoes, etc. The effects of 
such disruptions can be partially overcome by 
stock piles of fuel at the generating 
Station, by arranging for use of diverse 
fuels, and by arranging alternative sources 
of supply for each fuel. 


Hydraulic generating units are dependent on 
Stream flow and the design of the storage 
system, and ultimately on precipitation. 
This may vary widely from year to year. 


Factors Affecting Generating System Reliability 


General factors affecting reliability have been 
discussed in Section 10.2.3. This section is concerned 
with the reliability of generating equipment and 
Structures. 


a) 


b) 


Security 


The security of the generating system is 
inherently high because: 


8) 


Generating units are designed to limit the 
number of sudden losses of generating 
capacity and the design of the bulk power 


system is aimed at accommodating those losses 
which: do occur. 


ii) Generating stations are designed to cope with 
the sudden stresses which may be imposed on 
them by problems on the bulk power 
transmission system. 

Availability 


This is the significant factor in determining 
generating system reliability. No generating unit 
is completely reliable; each becomes unavailable 
for full operation from time to time, because of 
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il breakdown, the need for maintenance, or for many 
2 other reasons such as those listed in Section 

g} EO 2 orale 

4 

5 

6 Ontario Hydro keeps detailed records of the 

7 performance of its thermal units. They are used 
3 aS an aid to forecasting future performance of 

9 existing and new generating units. 

: Availability Performance Indices 

Re The specific availability indices used in the 

14 generation planning process are: 

- - The Planned Outage Factor (POF) 

1? The percent of hours in the year that a 
18 unit is scheduled to be out of service 
Lg for periodic overhaul planned months in 
20 advance, 

21 

es - The Maintenance Outage Factor (MOF) 

24 The percent of the hours in the year 

25 that a unit is scheduled to be out of 
26 service (mostly on weekends) for week- 
27 to-week repairs. 

28 

29 - Forced Outage Rate (FOR) 

30 

31 The ratio of forced outage hours (only) 
32 to the sum of forced outage hours and 
33 operating time. 

34 

35 - Adjusted Forced Outage Rate (AFOR) 

36 

a7 A further expansion of the forced outage 
38 rate which includes the effect of forced 
39 deratings and the effect of scheduled 
40 outage extensions. 

41 

OO, - Derating Adjusted Forced Outage Rate 

43 (DAFOR) aes Pay a ee 

44 

45 An expansion of the forced outage rate 
46 which includes the effect of forced 

ia deratings, but excludes scheduled outage 
48 extensions. 

49 

50 
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Definitions of these indices are given in Appendix 
10-B. 


The definitions used by Ontario Hydro are 
generally similar to those used by other North 
American utilities and by the Edison Electric 
Institute but differ in some details. Broad 
comparison of indices reported by utilities is 
possible. However, careful examination is needed 
to determine all differences in the methods of 
recording and reporting data before interpretation 
of the comparison can be made. 


Similar availability data are not recorded for 
Ontario Hydro's hydroelectric units. These units 
are relatively small and have high availability. 
Although their capacity is of major significance 
in supplying the load, their availability 
characteristics are not significant in determining 
the reserve requirements of the overall generating 
system, 


Past Availability Experience . 
—_——_—_—_——————— 


Appendix 10-C provides an illustrative sample of 
the availability data kept for Ontario Hydro's 
large thermal generating units. This is taken 
from data for the period 1965-1975 contained in 
Reference 9, : 


Forecast Availability 


For planning, forecasts are prepared annually of 
the availability to be expected from existing and 
new units. For existing units, the estimates 
include consideration of their experience 
assessment of their current condition and any 
planned changes to the units. For new units, the 
estimates are based on extrapolation from 
experience with existing units, design data, and, 
where available, with comparable units or 
components elsewhere. These latter estimates may 
change as design proceeds and more detailed 
information becomes available. 


The 1976 Forecast of Outage Indices for Corporate 
Planning Use are given in Appendix 10-D. 
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d) 


e) 


f) 


Mode of Operation 


Generating equipment is designed to operate 
primarily in one of four modes, i.e. base load, 
intermediate load, peak load or reserve. If it is 
operated extensively in a mode other than the one 
for which it is designed, or if the operating 
conditions (type of fuel, weather phenomena etc.) 
are changed, the reliability of the unit may be 
affected. Assessment of the mode of operation is 
included in estimating future performance factors. 


Environmental Constraints 


These define the conditions which may limit the 
discharge of combustion products and rejected heat 
from thermal generating stations. The stations 
are designed to operate within these constraints 
for all normally experienced conditions. Under 
adverse local conditions however, e.g. a 
temperature inversion, it may be necessary to use 
a different fuel or to reduce the loading of 
generation at a particular station. 


Omer Factors 


There are many other factors which may affect 
generating system reliability but which are not 
amenable to engineering solutions, e.g. strikes of 
operating staff, or major shortages of fuel 
because of strikes, embargoes or general 
shortages. 


Availability OL Capacity, 


A proportion of the generating capacity may be 
unavailable at any time. To continue to supply 
the load under such conditions, it is necessary to 
have reserve generating capacity available. 
Appendix 10-E shows a histogram of thermal unit 
outages from 1970 to 1975. The following 
tabulation indicates the approximate range and 
average value of unavailable thermal capacity 
expressed as a percent of the annual primary peak 
load for the years 1970 to 1975: 
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Year Range of Outage % Average % 
19.70 0-28 Li 
Ley Tal. 1-29 16 
Loe 3= 36 17 
1973 3= 39 ras 
1974 5-47 22 
1945 6-49 24 


Reliability and Maintainability in Design, 
Construction and Operation of Generating Units 
ie etn OF enerating Units 


To improve the reliability of the generating 
System, two courses of action are open to the 
utility; one is to provide increased redundancy in 
the form of additional reserve Capacity and the 
other is to improve the performance of the 
individual generating units. Most Hele tes 
follow both courses of action. 


It is Ontario Hydro's policy to design into power 
Stations reliability and maintainability (R&M) 
equivalent to that of the best similar stations on 
the North American continent. The objective is to 
minimize the total life cycle cost of new plants, 
not just their capital cost. 


In 1970, Ontario Hydro formally established a 
reliability group in its Generation Projects 
Division. This group was asSigned the 
responsibility for planning and introducing a 
reliability and maintainability (R&M) program into 
the design of all future generating stations. The 
program applies equally to fossil and nuclear 
Stations. The following are the main tasks 
identified by the program: 


(i) Establishment of an R&M program, plans and 
organization to implement and control the 
program. 

(ii) Introduction of R&M methods in design. 


(111)Collection, analysis and utilization of 
Operational experience data. 


(iv) Reliability of equipment: Specifications, 
evaluation and improvement. 


10.0 Page 21 


Line 
Number 


(v) Training of engineering personnel in 
reliability engineering. 


A further description of this is provided in 
Reference 10. 


For existing generating units, a performance 
review is carried out each year to assess each 
station and to identify areas where improvement 
may be possible. 


POR es oe) Availability Assessment 


The factors affecting generating system availability 
can be placed in two categories: 


(a) 


Those whose occurrence can be estimated to a 
reasonable degree of confidence. 


These include: 


i) Forced outages and derating of individual 
units; these are random occurrences which 
require the unit to be taken out of service 
or derated as soon as possible. 


ii) Maintenance outages and deratings of 
individual units; these are random 
occurrences but the outage or derating can be 
postponed for several days time when it is 
less likely to interfere with the system's 
ability to supply the load fully. 


iii) Planned outages; these are scheduled to carry 
out periodic overhauls, generally several 
months in advance. 


iv) Variations in the output of generating units 
due to known government regulations, normal 
seasonal changes in temperature, normal river 
flow variations. 


In assessing the availability of the generating system 
one must recognize that the system must be capable of 
continuously supplying a load that varies from hour to 
hour, day to day and from season to season. Figure 10- 
3 shows the hourly variation for a typical week in 
December and July. Figures 10-4 and 10-5 show the load 
and capacity conditions at the time of peak load for 
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each day in 1974 and 1975 for the Ontario Hydro East 
System. 


(b) Those whose occurrence cannot be estimated with 
any confidence. These include: 


a) Forced outages or deratings occurring 
coincidentally or overlapping because they 
are interrelated. 


ii) Variations in output of generating stations 
because of unforeseen government regulations, 
abnormal weather conditions etc. 


iii) Strikes, shortages of critical materials, the 
assistance which can be obtained from 
interconnections and other external factors. 


As might be expected, those in category (a) are most 
common and have the greatest day-to-day effect. Those 
in category (b) occur, but less frequently and with 
unpredictable effects. Furthermore, several of them 
can be dealt with only by extraordinary action which 
must be selected at the time to suit the circumstances. 
Accordingly, Ontario Hydro's reliability computations 
are principally concerned with factors in category (a). 


Computational Techniques 


Figure 10-5 shows the relationship between load and 
available generation for the East System at the time of 
peak load for each day in 1975. The installed reserve 
as a percent of the annual primary peak load was 27.1% 
and there was only one occasion when the load exceeded 
the available dependable generating capacity. 


Figures 10-6 and 10-7 show the number of instances when 
the firm load would exceed the available capacity 
assuming the capacity availability remained the same as 
in 1975 but the firm load level is increased such that 
the December reserves are 20% and 15% respectively. 
Figure 10-8 shows separately the actual reserves £or 
the above three conditions. 


Computational techniques for forecasting reliability 
attempt to take into account all the variations shown 
in Figures 10-3, 10-4 and 10-5 plus many more, such as 
error in forecast loads and generation. They produce a 
descriptive index indicative of future system 
reliability. Such indices can be interpreted properly 
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only if one has full knowledge of the comvutation and 
the data input. 


(a) 


(b) 


Use of Probability Techniques 


The most commonly used techniques to assess 
reliability are based on probability methods. 
These methods recognize that the load to be 
Supplied varies from hour to hour on a daily, 
weekly and seasonal pattern. The availability of 
generation also varies in accordance with the 
combined effects of forced outages and deratings 
which are random, and planned maintenance, 
predictable deratings, etc. which are not random. 
Computational techniques are used to calculate the 
probability that the available generation will be 
sufficient to supply the load. 


Alternative Probability Methods 


Several methods for calculating and expressing the 
reliability of the generating system have been 
developed and are described in the literature 
(Reference 11). The main methods are: 


1) 


Loss of Load Probability (LOLP) 
ow etch ORE ESE TS AY beat elm acl aad cance eattema th MNlb Necchiabrantct he 


This gives the probability that the available 
generating capacity will be insufficient to 
Supply all of the daily peak loads. The 
method considers the peak load on each normal 
working day of the year, i.e. about 240 days 
excluding holidays and weekends when the load 
is low. It also considers forced and 
Scheduled outages and deratings of generating 
units. Other factors such as load forecast 
uncertainty, lateness of the in-service dates 
of new generation and assistance from 
interconnections can be included in the 
calculations if adequate information is 
available. The lower curve on Figure 10-9 
illustrates the typical variation of the LOLP 
with installed reserves for the Ontario Hydro 
East System, 


The result gives no indication of the 
Magnitude or duration of the generation 
deficiency, only the probability that it will 
occur, on the average. 
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c) 


The seasonal variation of LOLP for various 
levels of December installed reserves are 
Shown in Figure 10-10. For this illustration 
it was assumed that no capacity additions 
occurred during the year as they normally 
would on a growing system. However, normal 
seasonal variation of unit output and planned 
summer maintenance have been included. 


ii)=—Losssof Energy Probability (LOEP) 


This gives the expected average eneray which 
will be unsupplied, and thus reflects the 
frequency, magnitude and duration of the 
Shortages of capacity. This requires 
consideration of the daily load cycle rather 
than only the daily peak load. - Figure 10-11 
illustrates the typical variation of LOEP 
with the annual installed reserves. 


i) Frequency and Duration (F & D) 


This gives the average number of times and 
the average length of time during which 
available generation is inadequate to supply 
the load. It requires consideration of the 
daily load cycle and frequency and duration 
of generating unit outages. Figure 10-12 
illustrates the typical variation of 
frequency and duration of interruption with 
different reserve levels for July and 
December. 


There are differences among utilities in the 
methods of application and the definition and 
sources of the data used in the above 
calculations. 


Significance of Criteria 
Se AE i ew rm nada eo tS 


Since each of these methods is based on a limited 
mathematical representation of the real generation 
system, they do not provide an absolute measure of 
reliability. They provide only numerical indices, 
The calculations can be used to compare the 
relative reliability of one plan for generating 
system development with another; they can be used 
to determine if the indices for a proposed plan 
meet specified criteria. Successive adjustments 
can be made in a plan and the calculations 
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ILLUSTRATION OF THE 
VARIATION OF LOSS OF ENERGY PROBABILITY (LOEP) 


WITH ANNUAL INSTALLED RESERVES 
ONTARIO HYDRO EAST SYSTEM 


ANNUAL 


Expected LOEP Expected LOEP 
Installed Unsupplied Total % Of Unsupplied Total TenQe 
Reserve Energy Load Total Energy Load Total 
% Load ( MWh ) ( GWh ) Load ( MWh ) (GWh ) Load 
25 PREIS 11,074 ZOO 2. 3847 LUG joes =OO33 
27 eS OL Lh ODS oto y) .0008 L699 114,231 20012 
30 36 10,648 .0003 754 sy ya -0007 
NOTE: 
(a) For illustration purposes, the installed capacity was held constant 


throughout the year; however, normal seasonal variation in output 
resulting from changing hydraulic conditions and planned outages 


have been included. 


(b) The capacity was held constant and the load varied to yield the 
indicated reserve levels. 
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repeated until the plan meets the speci fied 
criteria. 


Furthermore, the indices calculated for long-term 
planning will almost certainly be different from 
Similar indices calculated for the actual system 
even if the system is built exactly as planned. 
This is because, by the time the system is built, 
actual data will be different from the factors 
assumed during the planning Stage, @.g. government 
regulations which changed in the interval will be 
known, the actual rating and performance of new 
units and the actual loads will be known, and may 
be different than assumed, etc. It is highly 
improbable that these data will be as assumed in 
the planning stage eight to thirteen years 
earlier, or that the variations in actual data 
from the planning assumptions will offset each 
other. 


The value of the computational techniques and the 
resulting indices is that they permit a part of 
the problem of assessing reliability which 
involves a large amount of data to be reduced to 
Simple numerical statements. 


Methods Used by Ontario Hydro 


Several studies of the relative merits of these 
alternative methods have been reported in the 
technical literature. These generally conclude 
that all methods result in similar requirements 
for future generation, provided: 


1) the standard or design criteria used when 
applying each method is selected so as to 
produce the same actual reserve generating 


capacity in the initial year of the expansion 
program, 


ii) there are no basic changes in the hourly load 
patterns 


iii) There are no major differences in the energy- 
producing capabilities of the future 
generation additions, 
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Ontario Hydro has also done some investigation of these 
methods, but its proposed generation programs have been 
based on the use of the Loss-of-Load Probability (LOLP) 
computation. This computation is similar in principle 
to, but different in detail, from LOLP computations 
made by other large utilities in North America. The 
process is described in Appendix 10-F, which includes 
lists of events which are accounted for and events 
which are not accounted for. Many of the latter could 
theoretically be included in the LOLP computation. For 
some of these, however, it is difficult or impossible 
to estimate the probability or ramifications of the 
event with any reasonable confidence. It is considered 
preferable to omit them and make the assessment of 
their effect a clearly identified matter for judgement. 


Results of Sample Calculations 


After taking account of maintenance and planned 
outages, that portion of the remaining capacity which 
can be expected to be unavailable at any time will vary 
with the value of the Adjusted Forced Outage Rates 
(AFOR's) and the sizes of generating units. For given 
conditions of AFOR's and unit size, the amount of 
reserve capacity required will vary with the level of 
reliability desired. The relationship of these factors 
is indicated by the the results of calculations 
performed using Ontario Hydro's LOLP program and 
presented in Figures 10-13 and 10-14. 


Some idea of the effect of the various factors may be 
gained from the following extracted from Figure 10-14, 
for fossil-steam units of the sizes expected to be used 
on the East System, 


Unit Size AFOR's LOLP Required R 
eOL 
by, Effect of Size 
500 8 1/2400 
750 10 1/2400 
ii) effect .of -AFOR's 
500 6 1/2400 
500 8 1/2400 
500 10 1/2400 
iii) Effect of Reliability Level 
500 1/2400 
500 8 1/240 
500 8 1/24 
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Required Additional Reserves Expressed As a Percent of the Additional Load 


The Required Additional Generating Reserves, 


Expressed As a % of the Additional Load That Can Be Supplied 


With a Specified Target Reliability, for the 
Addition* of a Series of Identical Generating Units 


I APORS,=275% of II AFORs = 100% of IIT AFORs = 125% of 
Forecast** Forecast** rm Forecast** 
LoLp INpDEx = 1. /2400 LoLP INDEX 1/2400 zioit Ades toe 
in cast 


LOLP INDEX =} /240 


MW Type AFOR % 


ee 
12 


12 


10 
10 


A 1250 
1200 


8 1000 


350 
750 


D 600 
$00 


E 500 
F 300 
G 200 


zaunuaaeanzanaa 


ooo ww 


LOLP INDEX = 1/240 


% 1o00 2000 iC) 1000-2000 


The Additional Load That Can Be Met 
With the Specified LOLP Index, in MW 


ES 


Additional units added to Ontario Hydro's existing and 
committed systemas of January 1976, plus Bruce B GS and 
Darlington GS. 


FIGURE IO-I3 


1975 forecast of mature AFORs. 
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Estimates of the Required Percent Reserve Capacity 
Associated With a Major Series of Additions of Identical Units* 


Required Reserve As % of Load 


AFORS AFORS AFORS 
Type of Units Forecast** 75%) OL 100% of WAGES tops 
MW Type AFOR, % Forecast Forecast Forecast 


ii Loss of Load Probability 1/2400 


A. 1250 Nuclear WP) 
1200. Fossil ey #3 oe #2 
Be LOOOF Fossa: aD 20 ZAG} 36 
850 Nuclear On) 
7500 fossa Om) ae Le a> 
DE 600 Nuclear 9 ) 
500 Nuclear 9 ) a bot 1? 
Be 500 Fossil 8 nD 16 
300 Nuclear 8 6 10 iL! 
200 Nuclear 8 Wf 10 
it LossmopeLoaduenrobabititvalLAZ4oO 
Ao 12507 Nuclear ye) 
1200 Fossil Lae) 4 ma ey 
B. 1000 Fossil We 16 23 30 
Cc. 850 Nuclear 16 5 
750 Fossil Om) one 21 
De 600 Nuclear 9 ) 
500 Nuclear 9 ) 8 12 16 
500 Fossil 8 % 10 14 
300 Nuclear 8 5 WA 
Gy. 200 Nuclear 8 4 7 9 
III Loss of Load Probability 1/24 
A. 1250 Nuclear alee 9) 
“1000 Fossil 12} 13 oe 25 
B. 1000 Fossil 12 162 Ly 23 
Oe 850 Nuclear 1), 9) 
750° “Fossil Ome) e Zs st 
De 600 Nuclear om) 
500 Nuclear 9 ) 6 10 13 
Ee 500 Fossil 8 5 ital 
300 Nuclear 8 4 7 10 
200 Nuclear 8 4 8 


* Additions to Ontario Hydro's existing and committed system as 
of January 1976, plus Bruce B GS and Darlington GS. The pexr- 
centages shown correspond to the amounts by which the addi- 
tions in capacity exceed the additional load that can be sup- 
plied with the shown Loss of Load Probability. 


** 1975 forecast of mature AFORs. fr I GURE {o-j4 
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It will be noted that the level of reserve is sensitive 
to all factors but particularly to the AFOR's; a 25% 
change in AFOR's produces the same 4% reduction in 
reserve requirements, as reducing the reliability level 
by two orders of magnitude, i.e. from 1/2400 to 1/24. 


Additional Factors 


The factors not included in the LOLP calculations have 
been referred to in Section 10.3.5. Appendix 10-F 
lists seventeen factors in all. Of these, twelve would 
clearly be adverse to reliability if they materialized, 
three might be adverse or beneficial depending on their 
particular nature, and two, voltage reductions and 
assistance from interconnections, would be beneficial. 
The following is a brief discussion of some of these 
factors. 


(a) Load Reductions Due to Voltage Reductions 


Voltage reductions imposed in November 1974 
indicated that a 5% reduction in supply voltage 
would result in a sustained reduction in load of 
2.8%. The reduction in load due to voltage 
reductions during non-winter months is not known. 


If Ontario Hydro's reserve margins are 
Substantially reduced for any reason, system 
voltage reductions will be made more frequently. 
In this case, it is possible that some customers 
will install compensatory equipment to reduce the 
effect of the reductions on their onerations. If 
this type of reaction is widesvread, the reduction 
of 5% in supply voltage will probably result in 
less than a 2.8% reduction in load during the 
winter months. 


Ontario Hydro considers that voltage reductions 

Should not be used to reduce planned generation 

reserves but should be held available for use in 
the event of major contingencies or actual loads 
being greater than forecast, 


(b) Assistance from Interconnections 
iron Bicep ine erhtacbon  aa SEESSA SA Se Se) 9) 
Following any contingency which suddenly reduces 
the total output of Ontario Hydro's generation, 


power flows instantaneously into Ontario from 
neighbouring systems in the United States and 
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Manitoba. Provided these power inflows and 
conditions in Ontario permit continued stable 
operation of the Ontario and the interconnected 
Systems, the power inflow will effectively replace 
the reduction in Ontario Hydro generation. 


However, it cannot be assumed that this flow of 
power into Ontario will continue automatically for 
the period of the contingency. This is because 
under the principles of interconnected operation, 
Ontario Hydro must increase the output of its own 
generation or it must arrange for continued 
assistance from the interconnected utilities. If 
further contingencies on the Ontario Hydro system 
result in a succession of reductions in 
generation, a limit will be reached on the power 
assistance available from interconnections. This 
limit will depend on the operating conditions 
existing in Ontario and the neighbouring 
utilities, and also on the capability and the 
willingness of these utilities to provide 
continued increasing assistance, 


There is no doubt that interconnections can 
provide improvements in reliability or can be used 
to enable reductions in installed generating 
capacity. This is illustrated in Figures 10-15 
and 10-16. However, the imorovements or 
reductions diminish rapidly if the various 
interconnected systems all reduce their level of 
reliability. This is considered to be the likely 
course of utility development in the veriod 1980- 
1985, and is a serious concern to Ontario Hydro. 


It appears that Ontario Hydro's neighbouring 
utilities will be tending to reduce their reserve 
margins in the period 1980 to 1985. If actual 
installed reserves prove to be low in this period, 
forced outages will increase because of the 
inability to schedule proper maintenance. 
Therefore, the reliability of the interconnected 
Systems will be much lower than the recent levels. 
Under these circumstances, it is unlikely that 
neighbouring utilities will be able to provide 
much assistance to Ontario Hydro or that they will 
be prepared to provide such assistance at times 
when their own actual generating reserves are 
small. 
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LOSS OF LOAD PROBABILITY(X/2400)OF EACH SYSTEM 
S 


WITH ALLOWANCE FOR ASSISTANCE FROM THE 
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0 1000 §=62000)=— 33000 «3264000 )~—s $000 
INTERCONNECTION CAPACITY (MW) 


Based on Ontario Hydro East System generation proposed 
for December 1982 interconnected with identical system. 
Each system's reserve is held constant at the level 
which provides the following LOLP with zero inter- 
connection capacity. 


Case (a) 100/2400 
Case (b) 10/2400 
Case (c) 1/2400 


ILLUSTRATION OF THE IMPROVEMENT IN THE LOSS OF 
LOAD PROBABILITY AS A FUNCTION OF THE INTERCONNECTION 
CAPACITY 


FIGURE 10-15 
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RESERVE REQUIREMENTS IN MEGAWATTS OF EACH 
° 
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9 1000 ©2000 3000 4000 5000 
IMTERCONNECTION CAPACITY (MW) 


Based on Ontario Hydro East System generation prenosed 
for December 1982 interconnected with identica systen. 
Each system reduces its reserve after interconnection 
to maintain LOLP at the following level: 

Case (a)  100/2400 

Case (b) 10/2400 


Case (c) 1/2400 


ILLUSTRATION OF THE POSSIBLE REDUCTION IN RESERVE 


REQUIREMENTS AS A FUNCTION OF THE INTERCONNECTION 
CAPACITY 


FIGURE 10-16 


c) 


d) 


The reliance upon interconnections with the United 
States for reducing planned generation reserves is 
a questionable practice, in view of the abLitey Of 
regulatory agencies to prohibit or control 
extended power flows between the two countries. 


For these reasons, Ontario Hydro does not use 
interconnections to reduce planned generation 
reserves, but holds them available for improving 
reliability in the event of major contingencies or 
actual loads being greater than forecast. 


Relation of Forced Outage Rate to 
Reserve Level 


The normal LOLP computation is based on adjusted 
forced outage rates derived from operating 
experience with systems having reserve levels 
which are reasonably adequate to permit normal 
maintenance outages. For lower reserve levels 
restrictions on outages for maintenance are 
certain to reflect in higher forced outage rates - 
i.e., the forced outage rate becomes a function of 
the reserve level. This in turn would increase 
the LOLP probability. 


Statistical information is not available to use in 
Such a computation. An approximation of the 
effect on the LOLP-Reserve function is shown in 
Figure 10-9, as derived in Reference 12. Also 
shown on this Figure is the relationshinv between 
LOLP and reserve if forced outage rates are held 
constant at the forecast value, 


Load Forecast Error 


An analysis of Ontario Hydro's record indicates 
that its load forecasts are, in a relative sense, 
quite accurate. One-year forecasts have about two 
chances in three of being in error by +3% or less. 


However the period of forecast that is of concern 
in planning the percentage installed reserve 
capacity is much greater than one ¥VeG@ar.onF Ora most 
of the generating stations being installed, the 
minimum period of forecast that will permit 
deferment of in-service dates without extreme 
disruption and increase in cost is six years=4 .On 
the other hand, the minimum notice for 
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installation of a unit is eight years. For a six- 
year forecast there is about a one in three chance 
of it being in error by +7.5% or more, 


Latefall of Unit In-Service Date 
sa ere er ee ee ee eee 


There are numerous and changing reasons for actual 
commercial in-service dates being different from 
those scheduled at time of commitment. Unlike the 
load forecast error, there is a built-in bias for 
latefall in the case of in-service date forecast 
error, deriving from the strong cost incentive for 
"tight" schedules, i.e., there is a greater 
probability of a unit being late than early. 


Figure 10-17 shows a probability distribution of 
the variation of in-service dates from the 
forecast dates at time of commitment. The data 
base is Ontario Hydro's thermal units installed 
during the past 25 years. From the data, it can 
be shown that the most probable schedule deviation 
is 24 weeks latefall, and that there is about a 
one chance in six of a 64-week latefall or greater 
and the same chance of a U-week or greater 
advancement. 


A wide variety of factors contribute to the 
Statistics on which Figure 10-17 is based, some of 
which may not apply to future installations. 
However, the data illustrate the probability of 
error in forecast capacity due to variations of 
actual in-service dates from the planned dates. 


Combined Effects of c), d), and e) 
pat halen a atte calidad Pata id Sania IED 


The data on probability of error in forecast load 
and capacity has been combined and the effect on 
reserve is shown in Figure 10-18 for a six-year 
forecast with the system load growing at the 
historical rate of 7% per annum. It May be noted 
that for a target reserve of 24%, if only load 
forecast error is considered, there is one chance 
in three that the reserve will fall outside the 
range of 15 °to 359%, Lf the forecast Capacity 


error is included the corresponding range becomes 
Sleek: Omen ye, 


Combining the error in forecast reserve with the 
approximated LOLP-Reserve function shown in Figure 
10-9 gives LOLP in terms of target reserve as 
Shown in Figure 10-19 and in terms of target value 
of LOLP as shown in Figure 10-20. These figures 
illustrate the dramatic increase in LOLP as target 
reserve is lowered. 
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For example, if target reserve is 29% to give a 
target LOLP of 1/2,400, there is one chance in two 
that the resultant LOLP will exceed 7/2,400, and 
one chance in six that it will exceed 300/2,400. 
However, if target reserve is reduced to 24% to 
give a target LOLP of 10/2,400, there is one 
chance in two that the resultant LOLP will exceed 
60/2,400, and one chance in six that it will 
exceed 1,300/2,400. 


Load Reductions by Controlled 


Frequency Reductions 


Isolated systems may rely on reducing frequency to 
reduce load in emergencies. Ontario Hydro 
however, is interconnected with the North American 
network and can reduce frequency only if the whole 
network does so, or by opening interconnections. 
Neither course is desirable. Furthermore, large 
modern steam turbines are designed to operate in a 
narrow band about the standard frequency; any 
Significant and sustained departure from this 
would have a very adverse effect on the life of 
the turbine blades. 


Other Factors 


Other factors listed in Appendix 10=-F but not 
included in the LOLP have occurred from time to 
time but their probability of occurrence is 
difficult to predict accurately. However, 
allowance for them must be made in selecting the 
level of reserve. This is done by judgement in 
the choice of the criterion for LOLP and the 
reliance to be placed on interconnections. 


LO oe Criteria For Generating System Reliability 


(a) 


Effect of Unreliability 


Utilities have generally designed their generating 
Systems to high levels of reliability. The 

underlying considerations can be directly related 
to the effect on customers in terms of some of the 
factorsribistedsin Sectional «2/i(b) Specifically: 


1) A shortage of generation is likely to cause 
large interruptions i.e. several hundred MI, 
as compared to interruptions for other 
causes. This is likely to result in load 
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cuts distributed among many customers on a 
rotating basis. Its effect will therefore be 
widespread, 


ii) A shortage is likely to prevail over several 
daily load cycles at least. : 


NPCC Criteria 


Ontario Hydro is a member of the Northeast Power 
Coordinating «Council; (NPCC).. ' The Counciil<isa 
group of the major electrical utilities in 
Ontario, New York, New England and New Brunswick, 
It was established in 1966 as a result of the 
massive power failure of November 9, 1965. Its 
purpose is to promote maximum reliability and 
efficiency of electric service in the 
interconnected systems by extending the 
coordination of their system planning and 
operating procedures. 


Tne TCOUNCL is, basic Criteria Lor Desion and 
Operation of Interconnected Power Systems", is 
attached as Appendix 10-G. This document which 
has been adopted by the members of the Council, 
states that; 


"Generating Capacity will be installed and located 
in such a manner that after due allowance for 
required maintenance and expected forced outages, 
each area's generating supply will equal or exceed 
aleay lOadeat: laaSteto 96) 5% of the time, - This is 
equivalent LO a.loss. of. load probapalaty of one 
day in ten years", 


Ontario Hydro Criterion 


Ontario Hydro had adopted the use of the LOLP 
method and the 1/2400 (commonly referred to as 
"one day in ten years") criterion for planning its 
East System before it joined the NPCC. There are 
differences in method of computations, input data, 
and application of this criterion among NPCC 
members. In Ontario, this criterion corresponds 
to a generating supply available 

99.9585 (2399/2400) of the time, not 99.9615% 
(2599/2600) and it is applied on a monthly basis. 
By this it is meant that to establish installed 
reserve requirements Ontario Hydro applies the 
criterion that the LOLP for each month should be 
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no greater than 1/2400. This has resulted in 
reserve requirements being set by December 
conditions since these result in the lowest 
reliability. 


The inability to calculate a theoretically optimum 
level of reliability has already been discussed. 
The choice of the 1/2400 criterion is based on 
experience and judgement of the level of reserves 
needed to provide for both the quantifiable and 
unquantifiable factors listed in Appendix 10F 
which result in generation loss, without 
Significant risk of raiiure. tousupply the load. 


A study of the rationale for this choice has 
recently been carried out and is contained in 
Reference 12. The analysis there shows that any 
reduction below the planning level of 1/2400 
greatly increases the risk of interruption. The 
conclusions, in part, are as follows: 


LOLP as computed by Ontario Hydro ignores numerous 
items, some of which have substantial impact uvon 
reliability. Experience has shown that this approach 
is appropriate provided the criterion for planning 
reserve is based on a LOLP of approximately 1/2400. 
However, if target reserve is deliberately lowered to 
any substantial degree, the computation is inadequate 
for assessing the reduction in reliability for two 
principal reasons. The first is that the range of 
error in the target reserve normally tolerated by the 
traditional criterion, moves rapidly, as the target 
reserve is lowered, into a range of the normal LOLP- 
Available Reserve Relationship in which the increase in 
LOLP is extremely rapid for small decrements of 
reserve. The second is that the relationship itself is 
altered from that prevailing at usual levels of target 
reserve in such a manner as to severely compound the 
effect of error in reserve forecasts". 


"Thus, what may appear to be a modest reduction in 
target reserve from the traditional criterion can 
easily present a serious hazard to the System 
reliability". 


"The results of deliberate reduction in target reserve 


will not likely become apparent until after an elapsed 
period of about eight years at which time it will take 
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an all-out-effort for the subsequent decade to begin to 
rectify the resultant unreliability". 


"Ignoring the value of interconnections on the East 
System and ignoring the load relief available from 
voltage reduction and interruptible load, the optimum 
value of target reserve is well above 30% probably 
about 35% - from the standpoints of economy, 
reliability and financing burden. Although there is a 
good deal of evidence to support the view that those 
two alleviating factors should be ignored to balance 
off the numerous other unaccounted for contingencies, 
if they are included, an appropriate target reserve 
could be 30%. Even at this value the most probable 
value of LOLP is .019 corresponding to five reductions" 


of load per year." 


PLANNING FOR RELIABILITY IN THE 
TRANSMISSION SYSTEM 


Introduction 


This Section discusses criteria and practices followed 
in planning for reliability in the bulk power 
transmission system. While the transmission system 
includes both the lines used for bulk power 
transmission and those used for area supply, the 
criteria for the bulk power transmission system are 
more severe and discussion of this system provides 
clearer illustrations of the practices which are 
followed to obtain reliability. 


Northeast Power Coordinating Council 

hee cla ena ee AMS Mt Set Dhar ott he hee es SAS 

a) Background - The November 1965 Power Failure 
rere net eee WEL FaALLure 


Prior to 1965, Ontario Hydro, as with most 
utilities, had not adopted formal reliability 
criteria for transmission planning. Rather the 
criteria to be applied in a particular 
transmission expansion program were decided on the 
basis of experience and judgement. 


The massive power failure of November 9, 6 GE Ss wramaae ia 
Northeastern United States and Ontario, showed the 
need for more intensive coordination of planning 
between interconnected utilities and for formal 
criteria which each utility would adhere to. The 
following quotations from a December 67 965 
report of the United States Federal Power 
Commission on the power failure give some idea of 
the impact of the failure on society: 
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(b) 


"Beginning at approximately 5:16 p.m. on November 
9, 1965, most of the northeastern United States 
experienced the largest power failure in history. 
The outage lasted from a few minutes in some 
locations toemore; thanee balf.day in others. It 
encompassed 80,000 square miles and directly 
affected an estimated 30 million people in the 
United States and Canada. Occurring during a time 
of day in which there is maximum need for power in 
this area of great population density, it offered 
the greatest potential for havoc". 


"The power failure of November 9 and 19 has made a 
deep impression on the public because of its 
widespread nature and because of the difficulty 
and delay in discovering the origin. It should 
nevertheless be considered in perspective. The 
service standards of the industry are very high, 
and interruptions are, on the whole, short and 
infrequent. The problem arises not because 
service is poor but because the universal and 
increasing dependence of the American public on 
this form of energy makes any widescale 
interruption seriously disruptive. The prime 
lesson of the blackout is that the utility must 
Strive not merely for good but for virtually 
perfect service". 


“Massive traffic jams occurred in cities 
throughout the region due to the failure of 
RLAatlicncontrolseigqnais, nack Of, transportation 
and failure of gasoline pumps left many people 
stranded in downtown areas of New York City, where 
hotels were unable to provide accommodation on 
upper floors because of lack of elevator and water 
service. Police and fire departments were left 
without normal communication systems, although it 
was reported that many of these departments had 
emergency and mobile units at their disposal". 


Members and Objectives 


As a result of this power failure the Northeast 
Power Coordinating Council (NPCC) consisting of 
the major utilities in New England and New York, 
and Ontario Hydro was formed in January 1966. The 
NPCC now comvrises a total of 21 utilities 
including the New B_unswick Power Commission. 
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Co) 


The objective of the NPCC is to assure the 
greatest practical reliability of service to the 
customer, It serves as a central coordinating 
agency for the expansion plans and operating 
procedures of the member systems. 


Subsequently, eight similar coordinating groups 
were formed to encompass most of the other 
electric utilities in the United States and four 
of the major utilities in Canada. These nine 
groups are shown on Figure 10-21 and form the 
National Electric Reliability Council (NERC). 


Activities 


Some of the activities of the NPCC for improving 
the reliability of the interconnected power system 
Since its formation in 1966 are summarized in the 
following: 


3) Criteria 


A number of criteria for design, operation 
and maintenance have been developed and 
approved by member systems of the NPCC. Some 
of the key criteria relating to the 
transmission system are: 


- Basic Criteria for Design and Operation 
of the Interconnected Power Systems. 
(Appendix 10-G)., 


- Procedure in a Major Emergency. 
(Appendix 10-H). 


- Bulk Power System Protection Philosophy. 
(Appendix 10-I). 


ii) System Analysis 


The NPCC periodically examines the adequacy 
of the system plans of the four NPCC areas 
(New York, New England, Ontario, and New 
Brunswick) . It assesses the transmission 
transfer capabilities within and between 
areas and with contiguous councils. It also 
reviews the relay protection schemes for 
major transmission system additions. 
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Lit) 


iv) 


Operating Procedures 


Plans for outages to transmission and 
generation equipment or for tests which could 
affect power transfers between pools are 
reviewed in advance and coordinated as 
required. Policies for the amount and 
distribution of operating reserve cavacity 
and for assistance in emergencies are 
developed and supervised by task forces of 
the NPCC. The performance of each area's 
automatic generation control is reported 
periodically together with the effect this 
control has on the total inadvertent eneray 
accumulation by the Council, 


Developments of Techniques for System Analysis 
ES Sn ane aneae” Seinen 


A comprehensive and original study was 
initiated to determine the need for improved 
generator computer models. This included an 
assessment of the importance of model 
improvement to the accuracy of security 
assessment. Recommendations were made to the 
industry on methods of obtaining data for 
such improved models. 


An investigation has recently been made of 
computer programs applying vrobability 
methods to transmission system reliability 
evaluation. A prototype program is being 
purchased and made available to the member 
Systems for trial. Improvements are to be 
made to the program to enhance its abilities 
in expectation of making it a vractical tool 
for power system analysis. This program is 
discussed in more detail later in this 
memorandum, 


In a pioneering effort, NPCC is creating an 
automated data bank to store the large amount 
of information required to nerform load flow 
and stability studies. 


Design and Operation of the Bulk Power 
Transmission System 


Key Principles 
In the past ten years, three key principles have 


been used in the design and overation of bulk 
power transmission systems. 
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adequate transmission should be provided so 
that a single probable incident will not 
precipitate a cascading outage resulting in 
major power interruptions. 


the system should be operated within limits 
so that a single probable incident will not 
precipitate cascading outages. 


plans should be made to minimize the 
magnitude and duration of interruptions for 
possible but improbable events or operating 
limits being exceeded by errors. 


Each of these principles is discussed in more 
detail in the following sections. 


i) 


Criteria for Adequate Transmission System 


Capacity 


The criteria to which Ontario Hydro has been 
designing the bulk power transmission system 
for the East System are contained in "Basic 
Criteria for Design and Operation of 
Interconnected Power Systems". (Appendix 10- 
G). 


These criteria embody probability in a 
qualitative rather than a quantitative way. 
They are intended to provide adequate 
transmission capacity so that the operator 
can have considerable flexibility in 
scheduling generation to meet constraints 
that may be imposed by such considerations as 
fuel costs or shortages, environmental 
regulations which may limit the operation of 
certain generating stations, and forced or 
maintenance outages of generating stations or 
transmission. Design studies assume 
applicable contractual transfers and the most 
severe expected load and generation 
conditions. 


The criteria require that during and after 
certain specified incidents the system 
should: 


- remain stable and voltage, line and 


equipment loadings remain within 
applicable emergency limits. 
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be adequate for testing the outaged 
element by manual reclosing without 
adjustment of generation. 


meet the above two conditions after any 
critical generator unit, transmission 
circuit or transformer has been lost, 
assuming area power flows and available 
generation have been adjusted between 
outages. 


The specified incidents are: 


a permanent three phase fault on any 
generator, transmission circuit, 
transformer or bus section cleared in 
normal time. 


Simultaneous permanent phase to ground 
faults on different phases of each of 
two adjacent circuits on a multiple 
circuit transmission line, cleared in 
normal time. 


a permanent phase to ground fault on any 
generator, transmission circuit, 
transformer or bus section with delayed 
clearing due to a circuit breaker, relay 
system or signal channel malfunction. 


loss of any element (generator, 
transmission circuit, transformer, bus 
Sectionror circubt Breaker) without a 
fanle, 


permanent phase-to-ground fault on a 
circuit breaker cleared in normal time. 


In addition, the criteria provide that the 
effect of certain possible but improbable 
contingencies be studied and plans be 
developed to minimize the spread of any 
interruption that might result from 
occurrence of these contingencies. These 
include: 


loss of the entire Capability of a 
generating station, 
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~ loss of all lines emanating from a 


generating station, switching station or 
substation. 


- loss of all transmission circuits ona 
common right of way, 


- permanent three-phase fault with delayed 
clearing, 


~ the sudden dropping of a large load or 
major load centre, 


- the effect of severe power swings 
arising from disturbances outside the 
NPCC interconnected systems. 


It is neither feasible nor necessary to test 
all elements of the power system for all of 
tne GOndittions outlined in the criteria, 
From experience and judgement, power system 
planners and operators identify the more 
severe and reasonably probable conditions. 
Mathematical models of the power system are 
then used to determine if the system 
performance is adequate under these 
conditions. If the system is found adequate 


-for these more severe contingencies it should 


be adequate for most contingencies. 


In addition to the criteria for the bulk 
power system, Ontario Hydro has develoned 
criteria for the design of the area and 
regional supply systems. nese are intended 
to result in a system WHiee provides the 
desired reliability for incidents which can 
affect users' supply but are unlikely to have 
more than a localized effect. 


The criteria attempt to assess probabilities 
in a qualitative way and are based on the 
principle that expenditures to improve 
reliability should be a function of the 
magnitude of the load interrupted, the 
duration of the interruption and the 
frequency of interruption. These criteria 
are in appendices 10-3 and 10-K. 


Operating Within Limits 


The facilities installed are determined eight 
or more years in advance by the system 
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design. Before and after they are placed in 
Service a great deal of computer testing is done 
to determine safe operating limits for changing 
system conditions. Careful surveillance and 
control is necessary to ensure that the system 
is held within these limits e.g. the amount of 
generation on line for system demand and 
operating reserve is distributed and monitored 
to ensure that if the largest unit should trip, 
its output can be replaced in five minutes 
without exceeding operating limits. 


In Ontario Hydro, this latter responsibility 
rests with the Richview System Control Centre 
operators. To assist them with this, a Data 
Acquisition and Computer System (DACS) is under 
development with a first phase already in use. 


DACSiwilis Garrysouresi xe cunctions : 


- establish a data base from which 
measurement errors have been filtered out 
and which is capable of representing the 
existing system operating conditions in 
terms of a mathematical model. 


- display appropriate data to the operators. 
The display devices consist of television 
screens, a wall size mimic diagram and 
hard-copy printouts. 


- process data to assist the operators with 
decisions related to the economic operation 
of the power system. 

= log and report data 

- provide automatic generation control. 

= process data to assist the operators in 
decisions related to the security of the 
power system, 

This last function assists the operators to 

maintain the system within accentable operating 

limits by 


- providing a comprehensive display and 
enunciation of system conditions. 
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- automatic checking of operating 
conditions against operating limits with 
enunciation of out-of-limit conditions 
and with automatic display of possible 
remedial actions. 


- automatic checking of system steady- 
State performance for assumed line, 
transformer and generation outages. 


- providing for simulation of control 
actions to check their effect before 
they are carried out. 


- providing evaluation of system 
performance for predicted conditions. 


Planning for Interruptions 


Despite the careful precautions taken in the 
design and operation of the system, events can and 
do occur which initiate major interruptions of 
electric load, through cascading outages of system 
elements. The system may then split into one or 
more islands which are sevarate from the main 
interconnected system, These islands, formed by 
automatic operation of the protective relaying and 
circuit breakers, may have a surplus or deficiency 
of generation with respect to load. 


When this occurs the objectives are to: 

- interrupt as little load as possible. 

- maintain as much generation as possible 
running and connected to the system so that 
Supply to the load can be restored without 
extensive delay. 


- minimize damage to major equipment. 


- reconnect the island to the main system and 
restore service as quickly as possible. 


Measures used in the design and operation of the 
System to meet these objectives include: 
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employing turbine-generator speed governors 
to match generator output to the load when 
adequate generation is available. 


employing load shedding if the load exceeds 
the capacity of the generation in the island. 
Emergency load shedding practices are set out 
in Appendix 10-H. 


providing adequate and highly reliable 
Station service, battery supplies and air 
Storage systems. These are required to 
ensure that generators can be safely shut 
down, and that communication systems, circuit 
breakers, cooling devices, control systems 
and other essential facilities can be 
operated in the absence of electric supply 
from the power system. 


providing System Control with information 
needed to direct the restoration of service. 


The report in Appendix 10-L describes the 
events that took place during one recent 
major disturbance. 


Designing For Reliability 


The design of an economical and reliable power system 
requires that in addition to providing some redundancy 
in the transmission elements, attention must be 
directed to the arrangement of the electrical 
connections and the provision. of reliable system 
components. 


(a) 


Transmission Lines 
foteartivetleielceetnaedind St Sem 


In planning, designing and constructing a 
transmission line for adequate reliability careful 
consideration must be given to the following: 


mechanical strength should ensure that the 
line will not be damaged by storms of normal 
intensity and that for the more intense but 
less frequent storms the damage will be 
limited. 


insulation levels should provide accentable 


outage rates from lightning, Switching surges 
and power frequency overvoltages, 
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(b) 


skywires and counterpoise should be installed 
as required to limit outages from lightning. 


number of circuits installed on a structure 
Should take into consideration the effect of 
failure of the structure on system 
reliability. 


number of lines on a right-of-way. 


While the loss of all lines on a right-of-way 
is relatively infrequent, the consequences 
can be extremely severe in terms of the 
resultant system disturbance. This aspect 
needs careful consideration in line location. 


Station Connections 


A typical transformer station single line diagram 
is shown in Figure 10-22. Some of the 
considerations in providing reliability in the 
Station arrangements are: 


two station service supplies are provided and 
connected to different points in the station 

so that a single incident will rarely result 

in the loss of the station service suvply. 


each circuit is connected through two or more 
circuit breakers, and switches are provided 
forsisolation of thercircnit breakers. In 
this way the circuit can be operated with one 
circuit breaker out of service. 


where possible circuits are arranged so that 
two adjacent circuits connected to a station 
bus feed power into and out of the station. 
This arrangement tends to minimize the 
consequences of losing two adjacent circuits 
which can happen if the breaker between those 
circuits fails to open for a fault on one of 
the circuits or if a breaker to one bus is 
open and a fault occurs on the circuit 
adjacent to the other bus. 


transformers feeding the same load are 
connected to different positions in the 
station 


connections are such that a single fault and 


a stuck breaker will not cause cascading 
outages, 
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Station Equipment 


Much station equipment such as transformers, 
circuit breakers, current transformers, switches 
etc, is manufactured by others and the utility has 
only a limited influence on its detailed design. 
Nonetheless the utility plays an important role in 
determining the reliability of the equipment by: 


~ specifying voltage and current limits that 
will ensure the equipment operates within its 
ratings, under expected conditions. 


- Specifying ratings that are within realistic 
manufacturing capabilities. 


= specifying equipment that is as simple as 
practicable. 


- providing adequate information to the 
manufacturer on the conditions under which 
the equipment will overate. 


25s careful evaluation of proposed designs. 


- providing feedback to the manufacturer on the 
actual performance of the equipment. 


- factory inspection and testing. 


Protective Relaying 


A great deal of attention is focussed on designing 
protective relaying. It must rapidly detect 
faults and initiate the tripping of the 
appropriate circuit breakers but must not onerate 
unnecessarily for steady-state loading conditions 
or during the rapidly changing loading conditions 
which may follow a system disturbance, 


Appendix 10-I, "Bulk Power Protection Philosophy", 
provides more information on this aspect of 
reliability design. 


Application of Probability Techniques 


The use of probability mathematics may someday provide 
a quantitative determination of expected future 
availability, outage frequency and duration for the 
bulk power system. To completely assess the composite 
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reliability of the system, the study must investigate 
all combinations of generation dispatches and 
transmission and generation outages. For each of these 
combinations the degree of element loading, svstem 
voltages, generation-load balance and system stability 
must be considered and assessed. This would require 
Suitable component performance data and analytical 
techniques. Techniques available at this time permit 
only a small part of such an investigation. 


The design and operation of transmission systems for 
reliability is based therefore largely on qualitative 
rather than quantitative assessments. This is because 
of the limitations in analytical techniques and 
component performance data. However, considerable 
effort is now being devoted to development of the 
necessary techniques and gathering of component 
performance data. It is expected that quantitative 
assessments will come into greater use in the next five 
to ten years. 


The results of such reliability studies are usually 
expressed in terms of indices which attempt to reflect 
the effect of unreliability (e.g. megawatts 
interrupted, megawatt-hours not served, etc). Some of 
these indices have been established with a view to the 
possible future calculation of the socio-economic costs 
of unreliability. Sample applications of reliability 
theory to two simple problems are illustrated in 
Appendix 10=M. 


The present status of these techniques is: 
(a) Component Performance Data 
foes ottoman tad Si enh alam srs dann es SE 


In reliability calculations, a component is an 
item or a group of items which is viewed as an 
entity for purposes of reporting, analyzing, and 
predicting outages. Most system components are 
complex assemblies of many parts and their 
reliability performance depends on the performance 
of these parts. 


Figure 10-23 illustrates the major parts which can 
affect the reliability of a transmission circuit. 
These include the conductors making up the three 
phases, the insulators, the towers and Supporting 
structures, the skywires and the associated 
Station facilities at each terminal of the line. 
Normally such station facilities will consist of a 
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line switch, circuit breakers, circuit breaker 
isolating switches, a line trap (if a power line 
carrier communication system is used), current 
transformers, capacitive voltage transformers, 
metering equipment, protective relaying equipment 
and associated communications. 


If useful information for predicting future 
performance is to be obtained from outage records, 
a great deal of data about the circuit, the 
associated station equipment, and the causes of 
the outages needs to be recorded. For example, a 
record only of the frequency of circuit outages 
would not reveal the fact that many of the outages 
were not related to the line part of the circuit, 
but to the terminal equipment. Also, since 
weather conditions have an important effect on 
transmission circuit performance, they too need to 
be part of the recorded data. 


Ontario Hydro has been collecting transmission 
outage statistics for many years. Recently there 
has been a concentrated effort to collect and 
Store both forced and scheduled outage data on all 
major components in a form which will be useful 
for predicting future performance. Typical data 
now being collected by Ontario Hydro are indicated 
in Appendix 10-N and some outage data for lines 
and terminal equipment are shown in Figures 10-24 
and 10-25. 


The historical performance of existing facilities, 
will of necessity, play an important role in 
predicting the future performance of new 
facilities. However, the possibility that) the 
reliability of the new facilities may differ 
Significantly from that of existing facilities, 
must be considered when predicting the performance 
of new facilities. 


Analytical Techniques 


There are a number of computer programs for 
assessing the reliability of the bulk power 
system, which include generation System 
reliability as well as transmission system 
reliability in the assessment. The available 
programs however suffer from one or both of the 
following shortcomings: 
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- assumptions are over simplified so that the 
model bears little resemblance to the real 
situation. 

= assumptions are realistic and the variables 


adequate but the application is limited to a 
very small system. 


The main analytical techniques now available are 
described briefly in the following and comvared in 
Figure 10-26. 


Continuity Approach 


This method determines the probability that there 
will be a continuous path between the generation 
and the load. It ignores circuit overloading and 
is applicable primarily to simple radial-type 
systems. 


Capacity-Flow Method 


This method determines the probability of load not 
being supplied due to inadequate generation or 
transmission capacity or due to a separation of 
the load bus from the main.system. It assumes the 
transmission elements can be loaded in accordance 
with their capacity but ignores the actual 
distribution of power flows. 


Load Flow Method 


This method provides similar information to the 
foregoing but carries out load flows so that 
actual power distribution and network voltage 
levels are taken into account. Its main 
limitation is that the size of the system must be 
kept quite small to keep computer running times 
and costs within reason. 


Simulation Techniques 


These methods use simplified load flows to obtain 
reasonable results, and avoid excessive computer 
times by selecting the conditions to be tested by 
a random process. These methods do not identify 
all the problem areas but can give some realistic 
assessment of the probability of load not being 

supplied provided enough tests are carried out. 
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Technique Capacity Distribution Levels Remarks 
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Radial Systems 


Capacity Flow YES NO NO 
a Sea ree nse pss nsession neponerenr ne sesapee 
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Composite System Reliability 


The utility industry is now attempting to develop 
a means of evaluating the overall reliability of 
generation and transmission configurations. The 
aim is to provide a composite reliability index 
for every point in the system. 


Ontarlovlydro as participating in this activity. 
In collaboration with other members of NPCC and 
Power Technologies Inc. it is developing the 
"Power Technologies Incorporated Fast Contingency 
Analysis Program" (PCAP). It is also carrying on 
separate studies on its own. 


The scope of these programs is described in more 
detail in Appendix 10-0. 


Interface Loading 


This method does not attempt to give a reliability 
index for the entire system as in the foregoing 

methods but instead focuses on the probability of 
outages at a particular interface in the system. . 


In this method the system is considered as two 
subsystems. The interface separating the two 
subsystems is selected by the system planner on 
the basis of his knowledge that one or more of the 
circuits crossing the interface are likely to be 
approaching their critical loading in the’ time 
period being considered. 


Generation reliability techniques can be used to 
determine the probability that the interface 
loading will be above specified levels. Load 
flows and stability programs can be used to 
compare the required circuit loadings with the 
permissible loadings. Probability theory can then 
be used to determine the probabilities of 
excessive loadings on the particular interface. 


The method appears to have advantages in assessing 
the need for new transmission lines and is under 
investigation by Ontario Hydro. 


Common Cause Failures 


Another important consideration in transmission 
planning and design is multiple unit failures resulting 
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from a Single cause. These are often referred to as 
common mode or cross-linked failures. Reference (14) 
lists five general causes of such failures as follows: 


- external normal environment - includes such 
factors as dust, dirt, humidity and temperature. 


- equipment design deficiency - accounts for 
electrical or mechanical interpendence between 
components or subsystems. 


- operation and maintenance errors - includes 
carelessness, improper adjustment or maintenance 
or other human factors. 


- external phenomena - tornadoes, fire, flood and 
earthquakes. 


= functional deficiency - inadequate design because 
of erroneous predictions about the behaviour or 
usefulness of variables monitored or erroneous 
predictions of the effectiveness of protective 
action to be taken. 


Many common cause failures have occurred because they 
were not foreseen in the original design. It can 
therefore be concluded that the ability to predict 
common cause failures in extensions to the electric 
power system is limited. Most of the effort must be 
directed to preventing such failures rather than 
predicting them, Their prevention requires careful 
consideration in every step of design, manufacture, 
construction, insvection, testing, operating and 
maintenance. 


Two types of common cause failures which have occurred 
on the Ontario Hydro system and were quite 
unpredictable are: 


- Current Transformer Failure 


Tnoduly, 1969 4a 230° KV current transtormmer in one 
circuit at Richview TS failed in a manner which 
caused three other lines to trip, setting off a 
cascading series of trippings at other stations. 
There was forced shutdown of generation and 
extensive customer interruptions in the Toronto 
area extending up to 35 minutes. 
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Violent Storms 
Two examples of violent wind storms are: 


= In August 1970, a "severe windstorm resembling a 
tornado" struck the Sudbury area. It destroyed 
several structures on 230 kV and 115 kV lines in 
one area, and on a 500 kV line some miles away, 
putting the lines out of service for up to a week. 


- In March 1976, high winds caused four towers on a 
230 kV two 2-<circuit line between Middleport TS 
and Buchanan TS to collapse. One tower fell into 
an adjacent 230 kV 2-circuit line breaking a 
skywire and two phase conductors on one circuit. 
Thus, all three 230 kV circuits carrying power 
from Middleport to Buchanan were automatically 
removed from service. 


Reliability Assessment of High Voltage 
Transmission System 


The reliable day by day performance of the high voltage 
transmission system is measured by the ability of the 
system to maintain supply to delivery points. These 
delivery points are the transformer station low voltage 
buses, which are considered to be the interface between 
the high voltage transmission system and the retail or 
distribution system, 


The two performance aspects considered are: 


- the ability of all Ontario Hydro generation 
sources plus firm purchases to meet the total 
electric load. 


- the ability of the bulk power system to deliver 
power continuously to its "delivery points". 


Generation Performance 


Ontario Hydro customers have not experienced 
interruption of supply as the result of generation 
shortfall for many years. There have been occasions 
when due to major contingencies it has been necessary 
to obtain emergency assistance over the 
interconnections. Such assistance has been obtained 
primarily over the US interconnections. Figure 10-27 
shows the frequency of emergency purchases of power 
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EMERGENCY PURCHASES BY ONTARIO HYDRO 
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made by Ontario Hydro from the interconnections with 
the United States for this purpose in recent years. 


Delivery Continuity 


Customers are affected by service interruptions in a 
complex way. This effect will vary depending upon a 
number of factors. 


For simplification and ease of calculation, Ontario 
Hydro has selected a few indices to indicate the 
continuity of supply of the high voltage transmission 
system to the delivery points. Two major indices 
relating to the continuity of Supply are: 


= the annual number of interruptions experienced by 
each delivery point, 


- the annual total interruption duration experienced 
by each delivery point. 


Figure 10-28 shows the system average of these indices 
for the 1970-1975 period. On average a delivery point 
was interrupted 1.85 times per year for a total 
duration of 21.3 minutes per year. Individual delivery 
point service can of course differ markedly from these 
averages depending on its supply configuration. For 
example during this period, interruptions to individual 
delivery points averaged from zero to 14.6 per year and 
interruption duration from zero to 449 minutes per 
year. 


These indices are calculated annually for each delivery 
point and a review is made of reasons relating to 
Significant deviations from the average. 


Since most electric utilities have not as yet developed 
long term statistics from which similar indices can be 
developed, Ontario Hydro has been unable to make inter- 
utility performance comparisons. 
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APPENDIX 10-A 


Seasonal Peak and Energy Characteristics of 


Ontario Hydro's Generating Resources 


indicates the monthly and annual characteristics of 
Ontario Hydro's existing generating resources. To eliminate non- 
seasonal effects due to changes in the quantity of these resources 
throughout the year, the data are limited in two ways: 


- For all resources except the 187 MW firm purchase from Hydro- 
Quebec, the resources shown are those in commercial service by 
January, 1976. Thus, the data exclude the capability of new 
resources forecast to come into commercial service after 
January, 1976. 


- The resources Shown exclude in all months the 187 MW firm 
purchase from Hydro-Quebec which expires on November yn 1976. 


As noted in Table 1, none of the data shown in this attachment takes 
account of the forced, planned, or maintenance outages or partial 
deratings of generating resources. In practice, these will occur 
and their effect is substantial. 

The following material is provided: 


Table Number of Data for 


East est 
System System 
(a) Definitions of Generating Resources 1 1 
(b) 1976 Peak Resources in MW, all 
months 2 5 
(c) 1976 Energy Resources in Average 
MW, all months 3 6 
(d) 1976, August, December and 
Annual Data, and Most Frequent 
Mode of Operation & 7, 


(e) 1976 Monthly Peak and Energy : 
Resources in Chart Form 8 8 
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TABLE 1 


Definitions of Generating Resources 
Data for generating units are based on the following definitions: 


(a) Hydraulic Resources 


Peak Resource (MW) 


This is the peak rating of a hydraulic unit, which is the 
maximum net power available to supply system load for at 
least 5 days per week, for daily uninterrupted periods 
equal to: 


i) Two hours for the East System, excluding the Sir Adam 
Beck plants. 


ii) Twenty minutes for the Sir Adam Beck installations. 
iii) Eight hours for all West System plants. 


Energy Resource (Average MW) 


This is the energy generating capability of a hydraulic 
unit, which is the maximum net energy available to supply 
system load within a month for the East System and a year 
for the West System. 


Alternatives Shown 

Hydraulic peak and energy resources are based on monthly 
mean river flows. They are shown for two alternative 
values: . 


i) Dependable values, attainable or exceeded 98% of the 
time, 


ii) Median values, attainable or exceeded 50% of the time, 


APPENDIX 10A: page 3 


(b) Thermal Resources 
Peak Resource (MW) 


This is the peak rating of a thermal unit, which is the 
maximum net power available to supply system load for a 
minimum of two hours a day, without exceeding specified 
limits of equipment stress. 


Energy Resource (Average MW) 


This is the energy generation of a thermal unit, which is 
the maximum net energy available to supply system load 
within a month for the East System and a year for the West 
System. 


The value shown is the Maximum Continuous Rating (MCR) of a 
unit, i.e., its design net electrical output when it is 
operating continuously. The rating may be adjusted after 
commissioning the unit. 


The peak and energy capability for nuclear and fossil-steam 
thermal resources shown include no variation from month to 
month as a result of weather or environmental factors. 
Studies of the effects of possible regulations governing 
circulating water usage are under way. Their outcome may 
require downward revisions in the estimated capability of 
these resources, 


The peak and energy capability of combustion turbine units 
reflect the effects of ambient temperature limitations. 


Measurement of Resources 


All peak and energy resources shown are the net outputs 
sent out to the system at the low voltage terminals of the 
step-up transformers. 


No account is taken of forced, planned, or maintenance 
outages or partial deratings of generating units which 
occur from time to time, 
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~ TABLE 8 
MEDIAN PEAK— MW 


ONTARIO HYDRO-EAST SYSTEM 
__1976 MONTHLY PEAK AND ENERGY RESOURCES 

| 
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ONTARIO HYDRO—-WEST SYSTEM 
1976 MONTHLY PEAK AND ENERGY RESOURCES 
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APPENDIX 10-B 


GENERATION RELIABILITY INDICES 


' 
H ¢ 


The eel eens list of definitions are the indices ere 
for unit and system performance. They are calculated br the - 


'incapability" program from the stored Thermal outage data, 


| nicer 


Forced Outage Rate is the ratio of forced outase hours 


to operating hours plus forced outage hours. 


Ste oe FO + FO(S) __ 
: | EOC Co eee De nO (oD) ; 

; ; + SCC + SCC(FD) + SCC(SD) - : 
| FO - Forced outage Herre 
| FO(S) - Sudden Forced Outage Hours 

0 - Operating hours at full availability 
| . O(FD) <= Operating hours during forced deratinss 
' ~0(SD) - Operating hours during scheduled deratings 


SCC = - Synchronous condenser operation at ful] 
| availability (coupled) , 
SCGs(ED ae Synchronous condenser operation at forced 
_ derating hours (coupled) 
SCC (SD) - Synchronous condenser operation at scheduled 


| 
fi 
j 
f derating hours (coupled) 
| 
I 


(2) 


DAFOR = 


DAFOR 


» 


Derating Adjusted Forced Outage Rate, this is an expansion 


of the FOR and includes the effects of forced deratings 


\ 


as well as forced outages, but excludes the effects of 


Maintenance. and Planned Outage Extension hours. 


_The DAFOR is essentially the same as the EFOR (Equivalent 


Forced Outage Rate) reported by the Edison Electric Institute 
on the. performance of units in the USA, and is used for 
comparison there with. | 


FO + FO(S) + O(FD)adi + SCC(FD)adj 
FO + FO(S) + O + OC(FD) + O(SD) + SCC(FD) + SCC(SD) + SCC 


OC FD) adj - The equivalent period of hours that a deeatinee 


would last if considered as a forced outage. 
eg a 20% forced derating lasting for five hours is 


equivalent to a\forced outage of one hour 


SCC(FD)adj - similar to O(FD)adj 


(3) 


AFOR = 


AFOR 


Adjusted Forced Outage Rate, this is a further expansion 


of FOR and includes all the effects included in DAFOR 


plus the effects of including Maintenance and Planned 


Outage Extension hours. 


FO + FO(S) + O(FD)adj + SCC(FD)adj + PO(E) + MO(FE) 


FO + FO(S) + 0 + O(FD) + O(SD) + PO(E) + MO(FE) + SCC 
+ SCC(FD) + SCC(SD) 


PO(E) ~ Planned outage extension hours 


MO(FE) - Maintenance outage extension hours 


bad , 


ret ie 


(4) MOF 


Maintenance outage factor, this is the ratio of main- 


; tenance outage hours (but not including extension hours) 


to time in period. 


MO_ hours + MO/I hours | eet 
MOF = Hours in period 
(5) POF 


Planned outage factor, this is the ratio of planned outage 


hours (but not including extension hours) to time in 
period. 


PO hours + PO/T hours | 


: AS Hours in period 


| 
| 
| 
| 
| (6) Incapability Factor 


= 


| This is the ratio of all types of outage hours and 
equivalent hours of deratings to hours in period. 


neapability Factor = FO + FO(S) + O(FD)adj + O(SD)adj + ABNO(FD)adj 
i + ABNO(SD)adj + SCC(FD)adj + SCC(SD)adj 

+ MO + MO(FE) + MO/I + PO + PO(E) + PO/T 
| Hours in Period 


(7) Operating Factor 


The percentage of total time in a specified time interval 
that a unit was operating. 


| 
| 
| 
. 
| 


i 


Operatinz Hours x 100% | , 


RCree eae pastes ~ Hours in Period 


(8). sudden Forced Outage Frequency (FO(S)F) 


The frequency of occurrence of sudden forced outages in 
the operating time normally expressed as events per. 
operating year. | | | 

For a given generating unit: 


No. of sudden forced outages per annum 


FO(S)F = - Operating Factor 


(9) Capacity Factor (Gross) 


The percentage of gross output that was actually produced 


ina specified time interval. 


Capacity Factor (Gross) = Energy Produced in Period (MWh eross 


MCR (Gross) x Hours in Period 


(10) Maximum Continuous Rating (MCR 
The design net or gross maximum electrical output for a 
generator operating continuously. This rating may be 


adjusted after commissioning the unit. 


(11) © Grid Incapability — Gr 
Grid Incapability is a unit outage caused by a component 
external to a particular generating station eee such 


as Eransmrssion line, switch-yard, etc. 


(12)  Cross-Linked Outage 


A cross-linked outage may be termed as an event affecting 
the state of two or more units simultaneously. The word 
simultaneously as used here has the meaning that an event 


affected two or more units within a four-hour period. 


(13) 


(14) 


Common Mode Qutage . 


é 


A common mode outage is an outage caused by a failure of 
some component that gives reasons to believe that the 
similar component on another unit or units Migntecat leur 
identical mode, and therefore, these components must be 


taken out of service for inspection. 


' System: Stress Event | a . ae es 


A disturbance on the Bulk Power System (BPS) which may 
require full or partial load rejection by a generating 
unit. | | on | 


(a) Local system fault (eg lightning) 
(b) Frequency deviations above 60.2 Hz or below 59.8 Hz 
(c) Voltage deviations more than + 10%. 
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APPENDIX 10-C 
ILLUSTRATIVE SAMPLE 


AVAILABILITY DATA KEPT FOR ONTARIO HYDRO'S 
LARGE THERMAL GENERATING UNITS. 


Reference (9°) provides complete data for 1965-1975. The 
attached charts have been selected from Reference (9) to 
indicate the various types of data which are available. 


4 R. L. Hearn 5 - 8 FOR, DAFOR, AFOR, ACF 

9 Nanticoke 1-4 FOR, DAFOR, AFOR, ACF 
IZ Pickering 1-4 FOR, DAFOR, AFOR, ACF 
13C Unit Averages 

14F Total Incapability 1975 
15F Forced Outage + Forced 


Derating + Maintenance 
Outage 1975 


16F Forced Outage + Forced 
Derating 1975 

LIA Unit Unavailability 1975 

18F Units on Forced or Main- 
tenance Outage 1975 

19F Units on Forced Outage 
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TABLE 4 


Outage Rates of Hydraulic and Small Thermal * \ 
Units used in System Planning Studies 


Planned & Maintenance 


Adjusted Forced | | 
Outage Rate Outage (Yearly Average) 
Hydraulic Units 5% 2 weeks 
54 weeks 


Small Thermal* Units 15% 


In Loss of Load Computations for the East System 
the forced outage rate of the above units is set 
to zero. This reduces the computational effort 
without significantly affecting the result. For 
the West System the above rates are used. 


Note: 


* Small Thermal Units included - combustion turbines 
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APPENDIX 10-F 


ONTARIO HYDRO'S LOLP COMPUTATION 


This appendix describes the Loss-of-Load 
Probability (LOLP) computation used by Ontario Hydro to 
assist in determining required reserve generating 
capacity. 


Ontario Hydro's computation is similar in principal 
to, but different in details from, LOLP computations that 
are made by other large utilities in North America. [It 
includes the following steps, for each month in the period 
under study: 


(1) Estimate the peak loads on each of the normal 
working days in the month. 


(2) Estimate the generating units that will be out 
of service for planned maintenance. Hence derive 
the generating units that are potentially capable 
of being operated. 


(3) For the units that are potentially capable of 
being operated, estimate the total capacity that 
will be fully operable, after taking account of 
forced outages and deratings. This estimate is 
done on a probability basis, using a mathematical 
model. The input to the model is a listing for 
each generator of its peak output capacity and 
its estimated characteristics of forced outages 
and forced deratings. The output from the model 
is a listing for the total generation on the system 
showing the probability that various total amounts 
of generation will be in an operable condition. 


Ontario Hydro's computation for its East System 
takes account of the variability in output of the 
Sir Adam Beck-Niagara hydraulic generating complex, 
and of forced outages and deratings of thermal units. 
Because these have only a minor effect, it takes no 
account of the variability in peak output of other 
hydraulic stations, or forced outages and deratings of any 
hydraulic units and gas turbines. Except in Dec- 
ember and January in the case of the Quebec purchase, 
no account is taken of possible failures in firm 
power purchases from Quebec and Manitoba. 
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Ontario Hydro's computation for its West System 
does take account of the forced outages of 
hydraulic and gas turbine units. 


(4) Combine the peak load estimates from (1) with 
the probability of having operable generation 
from (3), to compute the probability that 
insufficient operable generation will be 
available to supply the daily peak loads 
throughout the whole month. This is the Loss 
of Load Probability (LOLP). 


The probability can be expressed as a per cent, 
decimal, or ratio. Typically it is expressed as a ratio 
using the number of normal working days in 5 or 10 years 
as the denominator. Ontario Hydro uses 10 years, for which 
it assumes that the number of normal working days is 2400. 
In the recent past, it has planned generation to meet a 
LOLP of about 1 in 2400 in December. This implies that, if 
all months are similar to December, on the average, for 
1 day in 10 years generation will be inadequate to supply 
the total estimated firm load. 


The LOLP computation as it is used at present has 
shortcomings, as can be seen from the fact that: 


Tt -accounts=f£oz: It does not account for: 

(a) Estimated forced outages (a) Forced outages and forced 
and deratings of major deratings of major units 
generating units, assum- which occur coincidentally 
ing the operating state or which overlap with one 
of each unit is indepen- another because they are 
dent of the states of interrelated. The effects 
all other units. of these events can be 


Stibstantial, but. at is 
aifficultsto estimate 
their probability of 


occurrence. 
(b) Estimated planned out- (b) Estimated maintenance out- 
ages and deratings. ages and maintenance de- 
ratings. It is assumed 


that these can be completed 

on weekends, although this 

is sometimes impossible. It 

is also assumed that weekend 
generation reserves will be large 
because the load levels are 
substantially lower on week- 
ends than other days. This 


situation may change in the 
future. 


(ec) 


(d) 


(e) 


30, 


Variations in 
hydraulic outputs 
at Sir Adam Beck- 
Niagara GS due to 
normal river flow 
variations. 


Variations in the out- 
puts of gas turbine 
and steam turbine units 
due to normal changes 
in temperature. 


Reductions in generating 
unit outputs due to 
known government 
regulations. 


Cutting of interrup- 
tible loads. 


(c) 


(da) 


(e) 


(f) 


(g) 


(h) 
(i) 


(3) 


(k) 


(1) 


(m) 
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Variations in hydraulic 
outputs at other stations 
or at Sir Adam Beck-Niagara 
GS due to severe icing or 
wind conditions. 


Variations in these 
outputs due to extreme 
temperatures. 


Reductions in generating 
unit outputs due to un- 
foreseen government 
regulations. 


Conversion of interruptible 
loads to firm.loads. 


The possibility that new 
generation will come into 
service ahead of schedule 
or behind schedule. 


Strikes. 


snoxtagesvor critical 
materials such as fossil 


fuels, nuclear fuels, 
heavy water, lubricating 
Oils; ete; 


Transmission being in- 
adequate to transmit power 
from the generators to 

the users. 


The energy production 
limitations at hydraulic 
stations. 


The possible failure of 
Quebec or Manitoba to 
deliver contracted firm 
power, except in the case 
of Quebec deliveries in 
December and January. 


Malicious damage. 
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(n) Actual firm peak loads 
being greater or less 
than forecast. 


(o) The possible reduction 
in load by lowering supply 
voltages to users. 


(p) The possible assistance 
available from other 
utilities by virtue of 
the interconnections. 


(q) Actual forced, maintenance 
and planned outages and 
deratings being greater or 
less than forecast. 


It is theoretically possible to include in the LOLP 
computation many of the factors not now accounted for. Some 
of the factors can be readily included in the computation. 
But for others, a major obstacle in including them arises 
from the difficulty, and in some cases the impossibility, 
of assigning appropriate probability factors to the events 
and in assessing all the ramifications of the events. 
However, many of the events from time to time do occur and © 
result in major reductions in the capability of Ontario 
Hydro's generation. 
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2 1250 BROADWAY /NEW YORK, N.Y. 10001 TELEPHONE: 212/868-1400 


Originally adopted by the members 

of the Northeast Power Coordinating 
Council, September 20, 1967. Revision 
adopted by the members of the Northeast 
Power Coordinating Council, July 31, 1970. 
Revision adopted by the members of the 
Northeast Power Coordinating Council, 
June 6, 1975. : 
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BASIC CRITERIA FOR 

DESIGN AND OPERATION 
OF INTERCONNECTED 
POWER SYSTEMS 
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AREA TRANSMISSION REQUIREMENTS 


Sal Stability Conditions 
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TRANSMISSION TRANSFER CAPABILITIES 
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4.2 Emergency Transfers 
4.2.1 Stability Conditions 
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POSSIBLE BUT IMPROBABLE CONTINGENCIES 
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INTRODUCTION 


The purpose of the Northeast Power Coordinating Council is 
to improve the reliability and efficiency of the interconnected 
power systems of its members through improved coordination in 
system design and operating procedures. 

One of the steps in reaching this objective is the develop- 
ment of criteria that will be used in the design and operation 


of the major interconnected power systems. Definitions of sev- 


-eral terms used in the following paragraphs are listed in the 


Appendix. 

It is recognized that more rigid criteria vit be applied 
in some segments of the Council area because of local consider- 
ations. It is also recognized that the basic criteria are not 
Seccrerigek cite to those elements of the individual mem- 
bers' systems that are not a major. part of the interconnected 
transmission network. 

The Peatemieaton criteria are applicable either to the areas 
(New Brunswick, New England, New York or Ontario) or to the en- 
tire Council interconnection in its WEetons with neighboring 
"pools". 

An interconnected power system should be designed and oper- 
ated at a level of reliability such that the loss of a major 
portion of the system would not result from reasonably foresee- 
able contingencies. In determining this reliability, it paeta 
be desirable to give consideration to all combinations of con- 


tingencies occurring more frequently than once in some stipula- 


ted number of years. However, sufficient data and techniques 


an ne nena net Tone tin. ro cas nasnddietanea Rana Aaieemmemmmadeanenemaeenetonmmeth nadkadiniae mi aeanenadind einatacataomanmambeadaie 
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are not available at the present time to define all the contingencies 


that could occur or to assess and rank their probability of occurrence. 


Therefore, it is proposed that the interconnected power systems be 


designed and operated to meet certain specific contingencies. Loss 
of small portions of the system (such as radial portions) may be tol+ 
erated, provided that these do not jeopardize the integrity of the 
over-all interconnected power systems. 

The following criteria for design and operation of interconnected 
power systems define area generation and transmission requirements. 
In addition, criteria for determining inter-area transmission transfer 
capabilities are defined. 

Two categories of transmission transfer capabilities. are to be. 


considered: normal and emergency. Normal conditions are to be as- 


sumed unless an emergency, as defined by Item 2 in the "List of Defini- 


tions", exists. 

Denies studies will assume applicable contractual transfers and 
the most severe expected load and generation conditions. Operating 
transfer capability studies will be based on the particular load and 
generation pattern expected to exist for the period under study. All 
reclosing facilities will be assumed in service unless it is known 


that such facilities have been rendered inoperative. 


. GENERATING CAPACITY 


Generating capacity will be installed and located in such a 
manner that after the due allowance for required maintenance and 
eceneed forced outages, each area's generating supply will equal -. 
or exceed area load at least 99.9615 percent of the time. This is 


equivalent to a "loss-of-load probability of one day in ten years". 


ayers 


3. AREA TRANSMISSION REQUIREMENTS 


The power system should be designed with sufficient transmission 


_capacity to serve area loads under the conditions noted below. The 


power system should also be operated in such a manner that the design 


objectives are fulfilled. 


3.1 


Stability Conditions 


“Stability of the interconnected power systems shall 
be maintained during and after the most severe of the con- 


ditions stated in a, b, c, d, and e below. Also, the sys- 


_ tem must be adequate for testing of the outaged element as 


eo 


described in "a" through “e" by manual reclosing after the 


outage and before adjusting any generation. These require- 
ments will also apply after any critical generator unit, trans- 
mission circuit, or transformer has already been. lost, assuming 
that the area generation and power flows are adiiered between 
outages by use of Five-Minute Reserve. 
a. A permanent three phase fault on any generator, 

transmission circuit, transformer or bus sec- 

tion, cleared in normal time, with due regard 

to eer eens facilities. 
be Simultaneous permanent phase to ground faults 

on different phases of each of two adjacent 

transmission circuits on a multiple transmis- 

Ais circuit tower, cleared in normal ced 

with due regard to reclosing facilities. 
c. A permanent phase to ground fault on ee: gen- 


erator, transmission circuit, transformer, 


rn rt ERE NRT) ES AA 1 WET MERSIN ATE RAS OE 
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or bus section with delayed Perrine en teh 
dee Ytegard to reclosing facilities. This de- 
layed clearing ealdeee due to circuit breaker, 
| relay system or eiene leenenne? mabrencetont 

di: Loss of any element without a ante 

e. A permanent phase to proend fault on a circuit 
breaker, cleared in normal time, and with due 
regard to reclosing facilities. 

sae Steady State Conditions 

a. Voltages, line and equipment loadings shall be 
within normal limits for pre-disturbance con- 
ditions. 

b. Voltages, line and equipment loadings shall be 
. be cree epplicah levee tence limits for 
the system load and generation conditions 
that exist ecitecinn the disturbance speci- 
Piede ities l, 

TRANSMISSION CAPABILITIES 

Transfers of power from one area to another, as well as with- 
in areas, should be considered in the design of inter-area trans- 
mission and internal area facilities. 

Operating capabilities shall be adhered to for normal trans- 
fers and transfers during emergencies. These capabilities will 
be based on the facilities in service at cherie of the prance tence 
In dececn tine the emergency transfer capabilities, it is assumed 
that a less conservative margin is justified. 

Transmission transfer capabilities shall be determined under 


the following conditions: 


et ieee! epaaceth eaters Kips 


were 


Oe eth ae ene sss 


4.1 


ae 


Normal Transfers 
a0imalt itansters 


Le tb Stat ““ity Conditions 


Stability of the interconnected power systems 

shall be maintained during and after the most 

severe of the conditions stated in ayo, C, ts 

and e below. Also, the system must be adequate 

for testing of the ented element as described 

in "a" through "e" by manual reclosing after 

the outage and before adjusting any generation. 

a. A permanent three phase fault on any gener- 
ator, transmission circuit, transformer, 
or bus section, cleared in normal time, with 
due regard to reclosing facilities. 

b. Simultaneous permanent phase to ground faults 
on different phases of each ofteve adjacent 

_ transmission circuits on a multiple transmis- 

sion circuit tower, cleared in normal time, 
with due regard to rkc1oeine facilities. 

ay permanent phase to ground fault on any gen- 
erator, transmission circuit, transformer, or 
bus section with delayed clearing and with 
due regard to reclosing facilities. This de- 
layed clearing could be due to circuit breaker, 
relay system or signal channel malfunction. 

d. Loss of any element without a fault. 

_@. A permanent phase to ground fault on a circuit 

breaker, cleared in normal time, and with due 


regard to reclosing Pacilities,,. 
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4.152 Steady State Conditions 


a. For the facilities in service during the 
transfer, voltages, line and equipment 
loadings shall be within normal limits. 

b. Voltages, line and equipment loadings 
Shall be within applicable emergency lim- 
its for the system load and erie 
conditions that exist following the dis- 
turbance specified in 4.1.1. 

4.2 Emergency Transfers 
Boe L Stability Conditions 

Stability of the. interconnected Systems shall 

be maintained during and after the most severe 

conditions in "a" and np below. System condi- 
tions may be adjusted before the Outaged ele- 
ment as described in "a" ang "p" below is 
tested. - 

ef A permanent three Phase fault on any 
generator, transmission Circuit. trane= 

former, or bus section, cleared in normal 
time and with age regard to reclosing 


facilities. 
A 


b. Loss of any element without a fal te 
Ln ee Steady State Conditions 
a. For the facilities in service during the 
transfer, voltages, line and equipment 
loadings shall be within applicable 


emergency limits. 


b. Voltages, line and equipment loadings shall 


ee eee 


1 te eRe A 


ey ae 


be within applicable emergency limits 


following the disturbance in 4.2.1. 


5. POSSIBLE BUT IMPROBABLE CONTINGENCIES 


Studies will be conducted to determine the effect of the follow- 


\ 


ing contingencies on system performance and plans will be developed 


to minimize the spread of any interruption that might result. 


a. 


b. 


' Loss of the entire capability of a generating station. 


Loss of all lines emanating from a generating station, 
switching station or substation. 


Loss of all transmission circuits on a common right-of- 


“way. 


Permanent three phase fault on any generator, transmission 
circuit, transformer, or bus section, with delayed clearing 
and with due regard to reclosing facilities. This gatayadi 
clearing could be due to circuit breaker, relay system or 
signal channel malfunction. | 

The sudden eaceteree large load: or major load center. 
The effect of severe power swings arising from disturbances 


outside the Council's interconnected systems. 
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- APPENDIX - LIST OF DEFINITIONS 


| i area is defined as ether New Rrunedici New England, 
Naw York or Ontario. 
EMERGENCY 


An emergency is assumed to exist in an area if firm load 
may have to be dropped because sufficient power is unavailable in 
that area. Emergency transfers are applicable under such con- 
ditions. | 
APPLICABLE EMERGENCY LIMITS 

These limits depend on teh duration of the occurrence, and 
on the policy of the various member systems of NPCC regarding 
loss of life paca ements voltage limitation, etc. 

Short time emergency limits are those which can be utilized 
for at least five minutes. 

The limiting condition for voltages should recognize that 
voltages at tee ieee nenG Be eoe below that required for 
suitable system stability performance, and should not adversely 
affect the operation of the interconnected systems. 

The limiting condition for equipment loadings should be such 
that cascading will not occur due to operation of protective de- 
vices on the failure of facilities. 

FIVE-MINUTE RESERVE 

Five-Minute Reserve is that portion of unused generating 
capacity which is synchronized to the system, and is fully avail- 
able within five minutes, plus that portion of capacity available 
in shut down generating units, in pumpeu hydro units and by cur- 


tailing interruptible loads which is fully available within five 


minutes. 


6. 


=P Oi 


"WITH DUE REGARD TO RECLOSING FACILITIES" is intended to mean that 
recognition will be given to the type of reclosing: i.e., manual 
or automatic, and the kind of protective schemes insofar as time 
is concerned. 
ELEMENT 

An element is defined as a generator, transmission circuit, 


transformer, circuit breaker or bus section. 
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APPENDIX 10-H 


NORTHEAST 
POWER 
COORDINATING 
COUNCIL 


1250 BROADWAY / NEW YORK. N.Y. 10001 
TELEPHONE: 212 / 868-1400 


PROCEDURE 
IN A 


MAJOR EMERGENCY 


Originally adopted by the 
Members of the Northeast 
Power Coordinating Council 
based on recommendations 

by the Operating Procedure 
Coordinating Committee on 
5/24/67. Revision adopted 
by the Members of the Council 
on March 27, 1972. 


NORTHEAST POWER COORDINATING COUNCIL 
pe tear aT aed Se oe cele tel beheading ere alent 


PROCEDURE IN A MAJOR EMERGENCY 


INTRODUCTION 


This procedure outlines a plan of operations to be followed 
in the event of a major emergency such as unusually low frequency 
equipment overload, or low voltage, which might seriously affect 
the operation of the bulk power supply systems. The objectives of 
the plan are: 


a. To restore the balance between load and generation 
in the shortest practical time. 


b. To minimize the risk of damage to lulk power 
supply facilities. 


c. To minimize the effect on customer service. 


The plan of operation is intended to indicate the results 
that should be attained but does not indicate the method to be used 
to obtain these results. The basic system designs and the methods 
of control vary widely among the systems. The methods to be used 
in implementing this procedure in detail in each area will not 
necessarily be uniform but must be coordinated. 


DEFINITIONS 
Load Relief - Load reduction accomplished by reducing: 
voltage or by load shedding or both. 
Automatic Load reduction accomplished without manual 
Load Relief - intervention by reducing voltage or by load 


shedding or both. 
Load Shedding- Disconnection of customer load. 


Dispatchers - The terms dispatcher and system operator 
have the same meaning. 


Area - As the situation requires, may meana part 
of a system, or more than a single system. 


5.) 9) PRINGCIBR EES 


The plan of operation during an emergency derives from 
the following basic principles: 


a. Tie lines, including internal transmission circuits, 
should not be opened deliberately except to prevent 
sustained interruption to customers' service or to 
prevent damage either to such tie lines or to equip- 
ment due to overloads, extreme voltages, or extreme 
frequencies. 


b. A sustained frequency excursion of + .2 hertz is an 
indication of major load-generation unbalance. Itis 
important for the area in trouble to provide load- 
generation balance at once to restore frequency so 
that any separated areas may be reparalleled as soon 
as possible. 


c. <Any general rule for balancing load and generation 
based on frequency alone risks undesirable overload- 
ing or tripping of tie lines or internal transmission 
circuits. If frequency is dropping rapidly, the risk 
from the application of underfrequency relays is pre- 
ferred to the risk of widespread shutdowns. 


d. At some low frequency, the ability of generators to 
maintain output is endangered. Although some machines 
will operate safely below 58.5 hertz, for the sake of 
uniformity the value of 58.5 hertz has been selected for 
the last step in the following procedure. It is recognized, 
however, that some machines may be in danger above 
58.5 hertz. If a machine is tripped above 58.5 hertz, 
equivalent load relief must be provided. 


e. Machines that are to be disconnected from the system, 
insofar as possible, should be isolated on local load to 
be available for resynchronization. 


4, REQUIREMENTS 


In order to follow the recommended plan of operation 


effectively, each system should meet the following require- 


ments: 


ae 


Accurate and reliable metering of tie line loadings 
and system frequency should be available at each 
dispatch center. 


Reliable and immediately available communication 
channels should exist between the dispatchers of 
adjacent power systems. 


Each dispatcher should know the permissible 
emergency loading of each of his tie lines and 
transmission circuits. The settings of the relays 
on the tie lines must exceed this value. 


Each system must provide a means to shed a minimum 
of 25% of its system load automatically to protect 
against low frequency conditions. This amount of 
automatic load shedding is designed to return frequency 
to at least 58.5 hertz in 10 seconds or less and to at 
least 59.5 hertz in 30 seconds or less, fora generation 
deficiency up to 25% of the load. 


Each system must provide a means to shed a minimum 
of 50% of its system load manually in 10 minutes or 
less to protect against low voltage and overload, as 
well as low frequency conditions. The automatic por- 
tion, if also controlled by manual means, may be in- 
cluded as part of the 50% manual portion. 


All automatic load frequency controls will be removed 
from service at 59.8 hertz on frequency decline and 
60.2 hertz on frequency increase. 


5. LOAD RELIEF PROCEDURE 


5.1 Low Frequency Condition 


I 


Automatic 


a. Ata nominal trip point of 59.3 hertz all 
systems initiate shedding of 10% load. 


b. Ata nominal trip point of 58.8 hertz all 
systems initiate shedding of an additional 
15% load. | 


c. By 58.3 hertz any member may automatically 
initiate shedding of additional load to meet 
his local conditions which may arise following 
separation from the system. 


d. If the frequency drops to 57.5 hertz for 10 
seconds or to 56.0 hertz for 0.35 seconds, 
any member may automatically initiate steps 
to protect generating equipment, including 
separation from the system with or without » 
load. It is recognized, that in Special cases . 
unusual requirements may dictate higher 
settings for underfrequency relays to protect 
equipment from damage. 


Manual 


When the generation-deficient area is clearly identifiable, 
when the frequency decline is slow enough to permit 
communication among various System operators, and 
when adequate consideration can be given to the amount 
of assistance which can be delivered to the deficient 

area by all power systems, the following procedures 

will apply: 


The deficient system will initiate immediate action 
to correct load-generation unbalance using procedures 
involving operating and emergency reserves including 
voltage reduction. 


If the action taken by the deficient system is not 
sufficient, and frequency continues to decline, then 
automatic load shedding will occur as detailed above. 


If at any time in the above procedure the decline in 
frequency is arrested and all Operating and emergency 


5.3 


reserves have been actuated, the deficient system 
shall then manually shed sufficient load to permit 
resynchronizing the island. 


At 58.5 hertz, if frequency is still declining, all 
systems shall shed up to 25% of load manually and 
then take such steps as are necessary, including 
isolating units with local load, to preserve genera- 
tion and to minimize damage and service interrup- 
tion. 


When the generation-deficient area is not clearly identi- 
fiable and when the frequency decline is so rapid as to 
preclude analysis and communication among various 
system operators, all systems will apply the above 
procedure without regard to tie line loadings. 


Transmission Overload Condition 
anne ww VETLOAG Vondition 


1, Establish communication with system operator of 
system producing overload. 


2. <All systems ina position to assist shall take any 
available action to relieve the overloaded condition, 
short of shedding load. 


3.° If the action in 2 above is insufficient, the system 
causing the difficulty shall take all steps necessary 
to relieve the overload promptly including the manual 
shedding of load. | 


4. If, after a reasonable time based on overload, im- 
provement is not made, open those ties necessary 
to prevent damage to equipment. 


Low Voltage Condition 


1, Establish communication with the system causing 
the low voltage. 


2. All systems ina position to assist shall take any 
available action to relieve the low voltage condition, 
short of shedding load. 


3. If the action in 2 above is insufficient, the system 
causing the difficulty shall take all steps necessary 


to relieve the low voltage condition promptly, including 


the manual shedding of load. 
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If, after a reasonable time based on voltage level, im- 
provement is not made, separate the affected portion 
of the system to prevent damage to equipment. 


6. RESTORATION PROCEDURE 
REL PURE 


In the event that an area becomes isolated and after 


the frequency decline has been arrested; 


1. 


Ps 


Restore frequency to 60 hertz. 


Establish communication with system operators of 
adjacent systems, 


Synchronize with adjacent systems, 


Coordinate restoration of any load previously 
shed, 


It is permissible to restore load concurrent with the 


performance of steps (2) and (3) provided frequency is main- 
tained at 60 hertz, other system conditions permit, and syn- 
chronization with adjacent systems is not delayed as a result 
of such action. 
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Bulk Power System 
Protection Philosophy 


PURPOSE 


The purpose of this Protection Philosophy is to establish the relay 
protection objectives on the NPCC bulk power system. The bulk power 
system is defined as the interconnected three phase, alternating 
current electrical systems of NPCC members comprising generation and 
transmission facilities on which faults or disturbances can have a 
Significant effect outside of the local area. These objectives shall 
apply to all relay protection systems specified for installation 
after the date of adoption of the philosophy. 


Special conditions and considerations on some segments of the system 
may require the use of more demanding objectives. 


It is recognized that there are existing portions of the system which 
do not meet the objectives as outlined herein. It will be the 
responsibility of individual members to assess the protection systems 
at these locations and make modifications which in their judgment are 
required to meet the general intent of this philosophy as outlined in 
Section 2.0. 


GENERAL PROTECTIVE PHILOSOPHY 
2.1 Protection Objectives 


The design objectives of relay protection systems on the 
bulk power system are: 


2.11 To minimize the effects of system disturbances. - 
2.12 To minimize possible damage to system equipment. 


2.13 To insure to the maximum practical extent that 
no single contingency will totally disable the 
protection on any bulk power system element. 


In general, this requires that protective relay systems have 
the ability to recognize and isolate all system faults rapidly 
and with a high degree of dependability and security. Reliable 
eperation of protective relay systems on the bulk power system 
must be assured because a malfunction can have far-reaching 
effects, such as exteusive service interruptions and/or damage 
to vital equipment. At minimum, this means that relay systems 
must satisfy the "NPCC Basic Criteria for Design and Operation 
of Interconnected Power Systems". However, consideration 
should be given to providing relay system designs which will 
permit the power system to meet more severe requirements than 
are contained in the above-mentioned criteria. 


BOL: 


2.2 Dependability 


Dependability is one of the two most important factors which 


must be considered i 


n the design of relay protective systems. 


A dependable relay system design must include careful 
attention to the following: 


- osen 


2.24 


2.25 


2.26 


To insure maximum dependability, all elements of 

the bulk power system must be protected by at least 
two protective systems, each of which is independently 
capable of detecting and isolating all faults without 
undue disturbance to the Bulk Power System consistent 
with basic NPCC criteria. Common components are to 

be avoided and areas of common exposure should be kept 


_ to a minimum, to reduce the possibility of any circun- 


stance that may lead to the Simultaneous failure of 
both systems. It is desirable to avoid the use of 
two identical systems in order to minimize the risk 
of simultaneous failure of both systems due to an 
obscure design or material weakness, 


Relaying systems should be no more complex than is 
required for any given application. 


The components used in protective relay systems 
should be of proven quality as demonstrated either 
by practical operational experience or by stringent 
tests under simulated operating conditions to insure 
that the dependability of the protective relay 
systems is not adversely affected by some device 

of unknown quality or capability. 


Components should have both the ability to withstand 
the most severe short-time overloads to which they 
may be subjected, and a continuous thermal capability 
such that they will not impose restrictions on the 
operation of the power system. 


The protective relay systems should be designed to 
minimize the possibility of component failure or 
relay malfunction due to transient conditions. 


Monitoring of the protective system is required to 
provide information regarding its Operating condition. 


Breaker failure protection must be provided to trip 
all necessary local and remote breakers in the event 
that a breaker fails to Clear a fault. 


The relay system should be designed to minimize damage 
to relays and associated equipment in the event of a 
malfunction or failure of a component part. 


2.3 Security 


2.4 


Ranking in importance with dependability is the ability 
of a protective system to be secure against undesired 
operations. In a highly complex bulk power system, an 
undesired breaker operation, occurring especially during 
a condition of system fault or other disturbance, may 
produce or initiate events of far-reaching consequences. 


2.31 One of the primary requisites of a protective 
system is to isolate only the section necessary 
to remove any type of fault from the system. 
For faults outside of its intended zone of 
operation, every relay system must be designed 
to either not operate or operate selectively 
with other systems. 


2.32 Protective systems should also be secure 
against any abnormal or unusual operational 
condition. They must be so designed that they 
will not operate for any system swing of less 
severity than that which would cause instability. 
Except in rare cases, protective rélay settings 
should not be the load-limiting factor. In such 
cases, the load limits imposed by the relay 
setting must be well documented and become a 
system operating constraint. 


2.33 The design should minimize the possibility of 
undesired operations caused by component failures 
or environmental conditions, such as vibration, 
shock, temperature, etc. 


2.34 Circuitry and techniques should be employed 
which minimize the possibility of undesired 
operations due to personnel error. 


Operating Time 


Requirements of the bulk power system for high-speed clearing 
are particularly stringent. Normal practice should provide 
for clearing all faults in the shortest possible time with due 
regard to selectivity, dependability and security. In those 
cases where there is consideration of a possible increase of 
clearing time to gain other advantages, careful analysis must 
be given to the following: 


2.41 System stability and any decrease in stability 
margins which might result from longer clearing 
times. 


2.42 Possible damage to equipment and the effect of 
time on the extent of damage which might be expected 
if faults are allowed to persist for a longer time 
than minimum. 
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2.43 Possible hazaré to personnel. 


2.44 Effect of distwr-:ances on service to customers 
in the area anz she consequences which may result 
from voltage fl-ctuations during such disturbances. 


2.5 Maintenance 


The design of the prc~ective relay system should facilitate 
periodic testing and xaintenance. Test devices or switches 
should be used to elininate the necessity to remove or 
disconnect wires duriz-z testing. 


Equipment should be l<«cated physically so as to be easily 
accessible. 


2.6 Coordination of Syste= Planning and Relay Protection 


Close cooperation shc:ild be maintained between the respective 
System Planning, Operzting, and Protection groups to insure 
that modifications or additions to the power system or its 
relaying will result in facilities that can be adequately 
protected and reliably and safely operated. 


3.0 GENERAL CONSIDERATIONS FOR ALL APPLICATIONS 
3.1 Instrument Transformers and Potential Devices 


3.11 Current Transformers - Each current transformer 
associated with relaying must have adequate 
characteristics for its intended function. In 
particular, the following requirements apply: 


3.111 The long-time thermal capability on 
the highest ratio tap should be at 
least equal to the long-time thermal 
capability of the equipment with 
which the current transformer is 
associated. 


3.112 The output of each current trans- 
former must remain within acceptable 
limits under all anticipated fault 
currents and connected burdens to 
insure correct operation of the 
protective relay system. 


3.113 The short-time thermal and mechanical 
capabilities on the operating tap must 
be adequate to prevent damage under 
maximum fault conditions or emergency 
system loading conditions. 
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3.114 In each independent relaying system, 
separate current transformer secondary 
windings must be used. 


3.115 The current transformer or its secondary 
windings must be located so that 
adjacent relay protective zones overlap. 


3.116 Current transformer secondary systems 
(paralleled current transformers, 
differential systems, etc.) must be 
grounded at only a single point. 


3.117 Care should be taken in specifying the 
size and type of current transformer 
secondary leads to assist in keeping 
the current transformer burden within 
design limits and to provide mechanical 
strength. 


3.12 Potential Transformers and Potential Devices 


3.121 Potential transformers and potential 
devices must have adequate characteristics 
and volt-ampere capacity to supply the 
connected burden and maintain their 
required accuracy over the specified 
primary voltage range. 


3.122 Two relay systems protecting the same 
area must not rely on acommon source 
of potential. The two systems may use 
separate secondary windings on one 
transformer or device, provided each 
secondary winding has sufficient capacity 
to permit fuse protection of the circuit. 


3.123 Where fuse ratings of less than 20 amperes 
are used, special attention should be 
given to the physical properties of the 
fuse. 


3.124 Potential transformer secondaries should 
be grounded at only one point. 


3.2 Batteries and Direct Current (DC) Supply 


3.21 It is essential that the DC supply associated with the 
power system protection have an extremely high degree 
of reliability. 


3.22 Two batteries each with its own charger must be 
provided at each location. The two relaying 
systems protecting the same area must be supplied 
from separate batteries. 


3.3 
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3.23 Each battery should have sufficient capacity to 
permit operation of the station in the event of 
loss of its battery charger or battery charger 
supply source for the period of time necessary 
to switch the load to the other battery or 
re-establish the supply source. Each charger 
should be of sufficient capacity to supply the 
total DC load of the station. 


A switching arrangement should be provided to 
connect the total load to either battery without 
creating areas where, prior to failure of either 
a battery or a charger, a single contingency can 
disable both Do supplies. 


3.24 Batteries and chargers and all associated circuits 


must be protected against short circuits, and all 
protective devices should be coordinated to 
minimize the effect of any disturbance. 


3.25 The circuitry between the battery and its first 
protecting device should possess the highest 
possible degree of reliability. 


3.26 The regulation of the DC voltage should be such 
that voltage within acceptable limits will be 
supplied to all devices under all DC loading 
conditions. 


3.27 Abnormal DC voltage levels, both high and low, 
should be monitored to detect charger and 
battery troubles. Other abnormal conditions, 
such as loss of AC to battery chargers, charger 
failure, and DC system grounds should also be 
monitored. 


3.28 Careful attention should be given to the design 
of the DC system to minimize voltage transients. 


Circuit Breakers 


The application of circuit breakers should conform to 


appropriate standards as published by the American National 


Standards Institute. 


Circuit breaker auxiliary switches used in protective relay 
circuits should be of a highly reliable type with a positive 


make-break action and good contact wipe. 


Two trip coils must be provided for each operating mechanism 
and so arranged that failure of one coil will not damage or 


impair the operation of the other coil. 


4.0 


3-4 Control Wiring 


Control wiring and all auxiliary control devices should. 

be of such quality as to assure high reliability with due 
consideration given for published codes and standards, 

fire hazards, current-carrying capacity, voltage drop, 
insulation level, mechanical strength, shielding, grounding 
and environment. 


3.5 Physical Separation 


Physical separation should be maintained between any two 
relaying systems which protect the same area in order to 
minimize the risk of both sets being simultaneously disabled 
by fire or accidents. 


3.6 Communication Channels 


Where communication channels are required to obtain 
adequate relaying, the communication facilities should 
be of such overall quality as to reflect the same degree 
of reliability as the relay system. 


Where redundant communication channels are required, these 
channels should be separated physically and designed to 
minimize the risk of simultaneous failures by avoiding 
mutual-use components. 


3.7 Environment 


Means should be employed to maintain environmental conditions 
that are favorable to the continued correct performance of 
protective relays. 


TRANSMISSION LINE PROTECTION 


Each of the two independent relay systems must recognize and 
initiate action to clear any line fault without undue system 
disturbance. One of the relay systems should operate fast enough 
for any line fault so that if ultimate clearing must be accom- 
plished by a breaker failure scheme, a widespread system 
disturbance will not result. A protective system, which can 
operate for faults beyond the area it is designed to protect, 
should be selective in time with breaker failure clearing of 

the area it is overreaching, except in those cases where lack 

of selectivity can be tolerated. 


Relay systems associated with transmission facilities must be 
designed not to operate due to system swings which are less 
severe than those which would result in instability. Where 
stability is not a consideration, the relay system should not 
limit the load-carrying ability of a line except in unusual 
cases; and under such circumstances, the conditions must be 
well documented. 


5.0 


Where relaying systems require communication facilities in 
order to perform their protective function, the protective 
systems must be so designed that a loss or misoperation of 
any one communication facility will not allow incorrect 
tripping of more than one line for an external fault. The 
design must also be such that if two relay systems protecting 
the same line use communication facilities, the loss of any 
one communication facility or power supply will not impair the 
operation of both relay systems. 


TRANSMISSION STATION PROTECTION 


Each area in a station must be protected by two independent relay 
systems. In areas not protected by line relaying, at least one 
of the two systems should be a differential type. 


One of the relay systems should operate fast enough for any 
station fault so that if ultimate clearing is accomplished by 

a breaker failure system, a widespread disturbance will not 
result. The relay systems should operate properly for the 
anticipated range of currents and, if practical, to the momentary 
rating for which the buses are constructed. 


All relay systems must be designed so they will not operate for 
load current or system swings which are less severe than those 
which would result in instability. 


Due consideration should be given to the station ground grids, 
control cables, etc., to minimize the risk of false operation 

of protective relay systems which might result from fault current 
and/or transient voltages in the station. 


5.1 Breaker Failure Protection 


Breaker backup relay systems must be installed to trip 
local and remote breakers as required to protect the 
system if any breaker fails to interrupt. One set of 
relays protecting each individual area must also 
initiate the breaker failure protection. Fault current 
detectors must be used to determine if a breaker has 
failed to interrupt. In addition, auxiliary switches 
may be necessary for high-speed detection of a failed 
breaker where the distribution of fault current may 

be such that fault detectors operate sequentially. 
Examples of this can be found with breaker-and-one-half 
and ring-bus arrangements. Auxiliary switches may also 
be required, in instances where the fault currents are 
not large enough to operate the fault detectors. 


6.0 GENERATOR PROTECTION 


Generator faults severe enough to disturb the bulk power system 
must be detected by more than one protective relay system. 


In addition, generators should be protected to keep damage to the 
equipment and outage time to a minimun. . 


In view of the special consideration of generator unit protection, 
the following items are listed as electrical conditions which 
should be detected by the protective relays: 


Field ground 

- Loss of excitation 

Faults in the generator or generator leads 

Generator out of step with the rest of the system 
Faults in the unit transformer 

Unbalanced phase currents 

Faults in unit-connected station service transformer 
Over-excitation 
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It is recognized that the overall protection of a generator must 
also involve non-electrical considerations. These have not been 
included as a part of this philosophy. 


The apparatus should be protected when the generator is starting 
up or shutting down as well as running at normal speed; this may 
require additional relays as the normal relays may not function 

satisfactorily at low frequencies. 


A generator should not be tripped for a system swing condition 
except when that particular generator is out of step with the 
remainder of the system. This does not apply to relay systems 
designed to trip the generator as part of an overall plan to 
maintain stability of the power system. 
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APPENDIX 10-J 


No. E2 
Date February 10, 1975 


System Planning Division 
Guides for Planning Area and Regional Supply Facilities 


Introduction 


System Planning Division Procedure No. El "Guides for Planning 


the Main Trunk Transmission System" specifies the reliability require- 


ments for design of the power system. While those criteria 
apply mainly to the bulk power system where contingencies are 
more likely to cause loss of a major portion of the East System 
or jeopardize the interconnected system, they also apply to 
other parts of the power system where local instability from 

a fault could cascade into the bulk power system. Studies to 
check the adequacy of all parts of the system to meet those 
criteria are normally carried out by those who plan the bulk- 
power system. 


In addition to designing the system as a whole for adequate 
stability and steady-state operation, it is necessary to design 
each part of the system for adequate continuity or availability 
of supply to individual large customers and to transformer stations 
supplying the distribution system. Criteria for availability are 
therefore required, particularly for the parts of the system 
known aS Area and Regional Supply Facilities. Such criteria are 
contained in this Procedure E2. 


It is also necessary to provide facilities for maintaining 
adequate normal and emergency voltages throughout the system. 
Voltage control is achieved mainly Fy installation of 
reactive power sources throughout the system, from genera- 
tors to distribution capacitors. Voltage criteria will 
be covered by a separate procedure. 


This Procedure E2 is not intended as a set of rigid rules, 
but rather as a guide towards establishing the minimum availabi- 
lity criteria for the Area and Regional Supply system. Parts 
of the system may be designed for lower availability, but this 
should only be done where the stage is temporary, where the 
reliability requirements of the load are low, or where the cost 
of the recommended reliability is unjustifiably high. Occasionally 
a higher availability may be justified, where the load is un- 
usually sensitive or the cost of improvement is low. 


Copies of this Procedure are being sent to the Power System 
Operations Division, with a note emphasizing that it is being used 
aS a guide only, and hence will not be rigidly applied. 
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Because this Procedure is based primarily on the accumulated 
experience of the members of System Planning Division, it will 
be revised as considered necessary. Section Heads and Planning 
Engineers are asked to use this procedure now on a trial basis 
and to report any comments or suggestions for change to their 
Department Head. 


2. The Area and Regional Supply System 


This comprises all 230 kV and 115 kV circuits supplying 
step-down transformer stations from 230 kV or 115 kV to 44, 
27.6 or 13.8 kV (called LV in the following), the step-down 
stations themselves, and the rh ie 500-115, or 230=L15akvV 
autotransformers and associated switching used for area supply. 
The high-voltage switching at major stations must be considered 
not only for its effect on area supply, but also for its effect 
on system stability. 


3. Normal Operation 


Normal operation is the condition under which all lines, trans- 
formation and switching in the location being studied are in- 
service. Under these conditions all facilities are to be loaded 
within their established normal capabilities, and all voltages 
are to be within their normal range for any condition of load 
or generation which could reasonably be expected to occur at 
any time of the year. 


4. Emergency Operation 


Emergency operation is the condition under which one or 
more elements of the system are out of service for routine 
maintenance, or for repair because of a failure. A number of 
common emergency conditions are listed in Table I. The operating 
conditions applying during the emergency are determined by the 
availability level assigned for a particular emergency and a 
particular size of load. These availability levels are defined 
in Section 6 below. 


In all availability levels except C, it is permissible for 
the load to be interrupted, but the load must be restored to 
Service within the specified period, depending on the 
availability level. 


At all times during the emergency while load is being 
Supplied, all facilities are to be loaded within their applicable 
emergency capabilities. This may be either short-term or long- 
term emergency capability as conditions dictate, | 
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6. 


Load Level \ 
The availability level required depends on the size of the 

load. For purposes of Table I, the load level is the peak load 

in Megawatts for the most critical month for the station or 

group of stations being studied, for a time about 2 to 5 years 

hence, depending on the lead-time for the new facilities. 

It is the load which would be interrupted by the 

occurrence of the contingency listed. Where "Interruptible" 


_ load is supplied from a station, the level of availability 
required should be discussed with Customer Service Division. 


Availability Levels 


Cc Continuous supply. This is the highest level. 
There should be no interruption in Supply as a 
result of the occurrence of the contingency. 
This level is designated C in Table I, 


The voltage may collapse for a few cycles while 
a fault is being cleared but it must rise 
immediately after fault clearance, and must be 
restorable to an acceptable emergency level by 
automatic action such as on-load tap changers. 
Transfer of such load to another source is 
permissible to relieve overload, but the 
transfer must be done without interrupting the 
load. : 


RR Restorable Rapidly. An interruption of 2 
seconds is permissible at the time of a 
contingency or at the later time of load trans- 
fer. Restoration within 2 seconds must be 
accomplished automatically by operation of LV 
breakers without operator intervention. 


RS Restorable by Switching. Load may be interr- 
upted at the time of the contingency, but it 
must be restorable within one-half hour, for example 
by the action of a control-room Operator using 
remote or supervisory control, or by use of 
automatically operated switching at the affected 
station. 


R2 Restorable by Manual Switching. Load may be 
interrupted at the time of the contingency, but 
it must be restorable within 2 hours. It is assumed 
there will be switches, quick=-openers or other 
devices available, which can be Operated by a 
travelling operator or maintenance man to restore 
Service. Means of quickly transferring metering, and 
relaying will also be required. 
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R8 Restorable by Maintenance. Load may be interr- 
upted at the time of the contingency, and 
restoration must be within 8 hours. Restoration 
is assumed to be the result of repair work 
or temporary connections which can be made by a 
maintenance crew. This may comprise such line 
work as replacement of a pole, crossarm, or in- 
sulators, repair of a broken conductor, by~ 
passing a defective switch, or such station work 
as repair or replacement of a defective low- 
voltage breaker, connecting of an on-site spare 
transformer (including metering, relaying, and 
service supply). Station design must be suitable for 
transformer connection to be accomplished within 
8 hours. 


X There is no fixed standard of availability against 
contingencies marked X. These are treated as 
"Possible but Improbable Contingencies". Each 
case must be considered separately, taking into 
account the probability of occurrence, length of 
repair time, extent of hardship caused, and 
cost of providing availability against the con- 
tingency. In any specific case the availability 
will be at a level no higher than R8, and may 
be as low as to permit the outage to extend for 
several days. 


Requirements for Transferring Load 


The action to restore supply may be taken either at the 
location where the fault occurred, thus restoring supply 
along the normal supply path, or at a remote location to 
transfer the load to another source. If load is trans- 
ferred, provision must also be made to transfer it back to 
the normal supply at a convenient time with minimum interr- 
uption. 


In the case of transformers and some cables, which have 
a high short-term overload capability, advantage may be taken 
of this capacity, provided excess load can be transferred 
off within the time limit set by the short-term capability. 
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Possible but Improbable Contingencies 


No standards are set for availability against more severe 
contingencies than those listed in Table I because of their low 
probability of occurrence and the generally very high cost of 
reliability measures. However, consideration should be given 
to the effect of these contingencies on specific important 
loads, and the availability against them should be improved 
wherever this can be done at reasonable cost. 


Some catastrophic contingencies for which there is no 
minimum standard are: 


~ Loss of several towers due to windstorm 
or vehicle impact. 


- Simultaneous or overlapping outage of two 
independent elements, such as outage of a 
transformer and the line supplying a second 
transformer at the same station. 


- Fire or explosion following a fault. 
- Loss of all circuits on the same right of way. 
- Loss of a complete station. 


Another group of contingencies which can occur, but 
“witen are only affected to a limited extent by planning 
decisions are listed below. 


= Errors in design, construction, or operation. 
- Failure or misoperation of relaying. 

- Failure of supervisory control. 

- Faults in station service system. 


| 
/ 


One type of possible but improbable contingency which 
will need more consideration in future is the catastrophic 
outage of several circuits on one right of way. It is likely 
that in the medium term future there will be narrow rights 
of way containing heavily-loaded multi-circuit tower lines 


Gia 
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with close spacing between lines and shared use of the right 
of way. In such cases, there is risk of an extended outage 
to one or more towers of one or more lines due to causes such 


as = Tornadoes 
~ impact by aircraft 
- gas-line explosion 
- relocations for highway modifications 
- footing damage due to flooding or 


land slippage. 


In the past, it was possible to provide a temporary woodpole 
bypass circuit on short notice, but such will not be possible 

on a crowded right of way. Therefore, consideration will 

have to be given to provision of back-up circuits from a 

different direction so that part of the load can be restored 

while repair to the damaged section is carried out. The 

criteria of Table I require provision of backup to large loads for 
loss of two circuits, but this backup need not be from a different 
direction, and can, in fact be from two other circuits of 


the same multicircuit line. 


Hare omic 
Director of System Planning 
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System Planning Division Procedure Nowe cE? 


Date February 1, 1978 
Supersedes December 21, 1971 


High Voltage Stations and Transmission Lines 


Number of Breakers Tripped to Clear Faults 


1. 


Introduction 


As our high voltage stations and transmission 
systems are expanded, more transformers are being 
connected directly to station buses or transmission 
lines, and more breakers are required to trip to clear 
all infeeds to a fault. As a result, relaying systems 
are becoming more complex to provide adequate first 
line protection. Also with these increasing complex- 
ities, the chance of failure to clear all infeeds 
rapidly is increasing, necessitating further complex- 
ities for backup protection. 


It is not possible to calculate mathematically 
the optimum balance of complexity, reliability and cost 
in specifying station diagrams. Therefore a review of 
existing practices within Ontario Hydro has been made, 
and, based on it, this Procedure has been prepared as 
a guide to show the maximum complexity which should 
normally be permitted in design of station diagrams or 
switching connections for transformers or circuits. 


Because it lacks a scientific basis, the Procedure 
is not intended as a set of rigid rules, but only as a 
guide toward establishing the maximum complexity which 
should normally be specified. Less complex diagrams 
(usually at higher cost) would be specified in cases 
where serious relaying difficulties would be encountered 
with the arrangements proposed in the Procedure, where 
the size or importance of the load justifies higher 
security, or where the additional cost is low. Diagrams 
more complex than the desired maximum should only be | 
specified where the stage is temporary, where the rel- 
iability requirements are low, or where the cost of 
lower complexity is unjustifiably high; and in such cases, 
only where relaying adequate to the reliability require- 
ments is feasible. 
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Copies of this Procedure are being sent to the 
Power System Operations Division, with a note emphasizing 
‘that it is being used as a guide only, and hence will not 
_.be rigidly applied. 


Because this Procedure is based primarily on the 
accumulated experience of the members of System Planning 
Division, it will be revised as considered necessary. 

“Comments and proposals for changes will be welcomed from 


Planning Engineers and Section Heads, and should be 
-- addressed to the Department Heads. 


2s General 


oc | 


This Procedure applies to 500 kV, 230 kV, and 
115 kV ring bus, breaker-and-one-half, and 
breaker-and-one-third diagrams at switching 
and transformer stations; and to transformer 
switching at 50 kV and lower voltages at trans- 
former stations. 


It shows the maximum complexity of switching 


' diagrams which should be provided under average 


planning conditions. The complexity is stated 

in terms of the maximum number of autotransformers 
or stepdown transformers which may be connected to 
a bus or circuit, and the maximum permissible 
number of high-voltage breakers which may be req- 
uired to trip at any station for a fault on any 
element. 


It does not attempt to specify the degree of 
complexity which should be permitted in the relay- 
ing. Relaying considerations must be investigated 
in each case after a preliminary selection of the 
switching diagram has been made. a 


It is not a set of rigid. rules, but is for reference 
purposes only. The planner must consider each case 
individually. Diagrams with a lower level of comp- 
lexity (generally resulting in higher cost and 
higher reliability) should be provided wherever 


relaying considerations dictate or wherever there is 
justification because of the size and importance of 


the load. Diagrams with a higher level of complexity 


should only be used under special circumstances 
such as for short-term requirements, or for loads 


with low reliability requirements, or where the cost. 
of normal complexity is unjustifiably high. 
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2. 5 The Procedure assumes the use of the following types 


ane 2's 6 


of transformation: 


Autotransformers - 19 or 39 OA: 
(autos) ' High Voltage - 500 or 230 kV 
. Low Voltage =- 230 or 115 kV 
‘Tertiary Voltage - 27.6 kV or 13.8 kV 
Tertiary to be switched by not more 
than 2 breakers. 


Stepdown Transformers - High Voltage - 500, 230 or 


115 kV 

ee Low Voltage - 44, 27.6 or 13.8 kV 
One or two low voltage windings. 
Each 44 or 27.6 kV winding 
switched by 1 breaker. 
Each 13.8 kV winding switched by 
1 or 2 breakers. 


These cover the range of types of transformation at 
present in common use, but are not intended to be 
limiting. 


Information is given in tabulated form in Sections 3 
and 4 Figures 1-16 illustrate the application of 
the guide to typical system arrangements. 


ee Specific Guidelines for 230 and 115 kV Stations 


et a 


Buses in Major Stations 


The maximum number of circuit breakers which 
may be connected to a HV (230 kV) or LV (115 kV) 
bus depends on the amount of equipment connected 


to the bus, as follows: 


mmr y c . Bs 1 Sm i) ae 
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Equipment Connected to Bus No. of Breakers Figures 


No circuit or transformation 6 1 
1 auto 25 2 
1 Ore2 stepdowns = 1 
1 auto plus 1 or. 2 stepdowns 2 
CLPcuitrs up to 5 miles long 
Radial circuit with 1 auto q Oe ue, 
Radial circuit with 1 or 2 f 

stepdowns ae 4 11 
Radial circuit with 2 autos a3 
Radial circuit with 3 or 4 

stepdowns ; 3 12 
Radial circuit with 1 auto plus 

os 1 or 2 . 
Stepdowns 3 

Trunk.circuit oS 5 


with no transformation 


Studies are being made of connecting a capacitor 
or a reactor directly to the 230 kV bus through a 
Single radial breaker. Because tripping is not 
necessary for short-circuit interruption, such a 
breaker may be in addition to the breakers in the 
aboveuliste.. 


Sane Simple Ring-Bus Stations 


The initial stage of a Major station may be 
specified as a simple ring of up to eight breakers, 
with the maximum number of breakers in the ring 
depending on the number of circuits terminating at 
the station,. as follows: 
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Breakers 

Equipment Switched at Station in Ring Figure 
§ circuits or fewer plus trans- 8 3 
formation : 

5 circuits plus transformation Ba7 

6 circuits : é 4 


The following equipment may be connected to any 
Switching position or to any circuit switched at the 
station. 


auto 

autos 

auto plus 1 stepdown (Figure 3) 
stepdown 

stepdowns 

stepdowns 


lw N = = A) = 


Station Connections for. Trunk. Circuits 


Trunk circuits are those which are switched at 
both ends (or all three ends) at main terminal stations. 
Trunk circuits are usually part of the bulk power net- 
work and may be- required to carry power flow in either 
direction. 


Transformation may be connected to trunk 
circuits, as listed in 3.3.1 and 3.3.2. This 
transformation may be connected at more than one 
Station. The stations do not all have to be 
adjacent to the main route of the trunk circuit, 
taps several miles long being permitted. 


5 (Fe 
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x SL Two-ended Trunk Circuit 


;' . Breakers at 
Description of Circuit Each Terminal Figure 
: \ 
Up to 5 miles long, Site =) 
no transformation 
connected 


' Longer than 5 miles 
No transformation 
connected 2 . 6 


1 auto + 2 stepdowns 


4 .stepdowns 2 8 
3.3.2 Three-ended Trunk Circuits 


- each end to be switched by 2 breakers 
(Figure 9) 


<- Transformation connected to the circuit 
is limited to 2 stepdowns (Figure 9) 


Station Connections for Radial Circuits 


Radial circuits are those which are connected 
to a main terminal station at one end only and carry 
power from that. point to one or more transformer 
stations supplying area load. Normally there will 
be two or more radial circuits supplying these trans- 
former stations, with these circuits connected to 
the same terminal station and paralleled through 
low voltage switching at the transformer stations. 
(This usage of "radial" differs from the dist- 
ribution usage which implies one circuit only 
supplying a load). . 


In some cases, radial circuits will have normally 
open switches at their ends (as shown in Figures 10-14) 
through which connections can be made to 230 kV 
circuits from another terminal station. It is intended 
that these switches will only be used to transfer 
radial load to another terminal station, and that when 


‘the switches are closed another open point between 


terminals will be established. If it were intended 
that the switches be normally closed to maintain a 
parallel between terminal stations, it would be 
necessary to treat the circuits as trunk circuits. 


—F= 
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- A radial circuit may be used to supply up to 
3 autos, or 6 stepdowns or an equivalent combination 


- The transformation may be connected to the circuit 
at more than one station. The stations do not all 
have to be adjacent to the main route of the line, 
taps several miles long being permitted. 


- The numbers of breakers used to switch the circuit 
at the terminal station are to be limited to the 


following: 
oA presrerss at 

Equipment Connected to Circuit Terminal Stn. Figure 
Radial Circuits up to 5 Miles Long 

1 auto 8 10 
1 or 2 stepdowns | ie 11 
1 auto plus 1 or 2 stepdowns 3 | 

3 or 4 stepdowns | 3 12 
2 autos . Be =e 3 
Radial Circuits Longer than 5 Miles 

1 or 2 autos 2 

1 or 2 stepdowns 2 

1 auto plus 1 Be stepdowns 2 

3 or 4 stepdowns 2 

1 auto plus 3 or 4 stepdowns 2 

2 autos plus 1 or 2 stepdowns 2 13 
3 autos (at one or two stations) 2 

= 2 14 


or 6 stepdowns 


ane 
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3.5 Autotransformers 


Autotransformers have two major terminals 

(HV and LV). One of these terminals (either HV. 

or LV) should be connected to a position switched 

by 2 breakers which has no other circuits or equip=- 
ment connected. The other terminal may be connected 
as permitted in the preceding subsections of 

Section 3. However, other alternatives are permitted 
which achieve essentially the same result. 


350 Generating Stations 


The high-voltage switching at generating stations 
should normally be specified as outlined in this 
Procedure, except that generator series synchronizing 
breakers should be considered on their own merits. 


3.7 System Diagrams 


3 7 eas Figures. 1.to 14 illustrate some of the arrangements 
described in Section 3. They are not intended to 
illustrate all possible combinations. For example, 
Figure 8 shows four transformers connected to a trunk 
line. These transformers may be at 4 different stations 
along the line, as shown, or all at one station, or 
some other combination, - : 


The permissible numbers of breakers listed in 
Section 3 are in terms of one element. However, for the 
; Figures, it is clearer to illustrate the principles as 
they apply to Jones type two-line supply. The Figures 
assumed the use of double-circuit lines, but the guide is 
intended to apply to single-circuit, double-circuit, . 
multi-circuit lines or underground cables. 


8. Specific Guidelines for 500 kV Stations 


It is intended that eventually the guidelines given 
in Section 3 for 230 kV stations will also be applied to 
500 kV stations. However, in the initial Stages of the 


500 kV system it is proposed to adopt guidelines which will 
result in reduced complexity. é ; 


The guidelines in this section will not aor i 
: : pply to certain 
500 kV stations now being designed where ioea sie dates 
are.critical¢ 
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4.1 Buses at Major Stations 


The maximum number of circuit breakers which may 
be connected to a HV (500 kV) or LV (230 kV or 115 kV) 
bus depends on the amount of equipment connected to the 

bus, as follows: 


Equipment Connected to Bus No. of Breakers Figure 


No circuit or transformation 6 
1 auto 5 15 
1 stepdown 5 
1 auto plus 1 stepdown a 15 


2 autos 


= Ww 


2 stepdowns 


4.2 Simple Ring-Bus Stations 


The maximum number of breakers in the ring is 
normally 6, but 8 may be considered for special 
applications. Where 8 breaker rings are proposed, 
Studies will be carried out to ensure that the : 
system can withstand normal contingencies with a. 
breaker out of service for maintenance. ; 


~4.3 Station Connections for 500 kV Trunk Circuits 
———————— 


Trunk circuits are to be two-ended and 
Switched by not more than two high-voltage 
breakers at each end (Figure 6). MTransforma- 
tion will be tapped off the circuit only in 
Special cases. 


High voltage breakers may be omitted where a 
line is terminated by one or two autotransformers 
as shown in Figure 16. The low-voltage switching 
in this case must be not more than two breakers per 
autotransformer, 


NN a  L———— 
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4.4 Radial 500 kV Circuits 


Since 500 kV and 230 kV circuits will be operated 
in parallel in the early stages, there will not be any 
500 kV radial circuits. Therefore no guidelines are 
included. . 


Ro5) SCOSKkV. Autotrans formers 


If the high voltage autotransformer connection 
is to a bus (as in Section 4.1) or to a line (as 
shown in Figure 16), the low-voltage connection 
should be switched by not more than two breakers. 
If the high-voltage connection is switched by 
only two breakers, the low-voltage connection may 
be switched by up to 5 breakers, as listed in 
Sectionvaal, 


4.6. Generating Stations 


The high-voltage switching at generating stations 
should normally be specified as outlined in this 
Procedure, except that generator series synchronizing 
breakers should be considered on their merits, 


5. Analysis of System Connections 


After diagrams for switching at one or more stations 
have been developed, a sketch should be made of the connect- 
ions at the station and at adjacent stations to analyze the 
effect of various failures and maintenance outages on the 
continuity of supply to the stations in the area... For 
example, the following contingencies should be examined: 


- any breaker isolated for maintenance 
- fault on any element, including breaker 
~ fault on any element with backup clearing because of 
' a Stuck breaker 
-~ fault on any element while any breaker is out’ for 
maintenance 


~ overlapping or simultaneous Outage of any two circuits 


—_LiL = 
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For example, in Figure 2, a fault on autotransformer A 
with failure to clear by a high-voltage bus tie breaker 
will cause loss of a second autotransformer. Or in 
Pigure 2, a fault on breaker 1 while breaker 2 is out for 
maintenance will cause loss of two autotransformers. In 
Figure 8, a double-circuit fault will cause loss of 
Supply to 4 Jones stations. In each case where a 
multiple effect occurs, it will be necessary to make 
reference to the "Guides for Planning the Bulk Power 
Transmission System" or the "Guides. for Planning Area 
and Regional Supply Facilities" to determine whether less 
of load is permissible or not. 
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Approximately 2% seconds a the initiating event, 210 MW 
of generation was rejected at Moses - St. Lawrence. This was due to 
‘ the tripping of the second Moses - Adirondack - Porter line. 


Three Ontario transformer stations, Belleville, Havelock 
and Oshawa-Wilson, with a total customer load of 183 MW, were 
automatically interrupted with the transmission tripping. 


The estimated pre-disturbance loading of the Ontario 
transmission at the separation points was 720 MW towards the Toronto 
area and for the New York transmission 530 MW to the south and east. 
Immediately following separation the island was in a overgenerated 
state. 


Subsequent Events 


Large frequency oscillations from 58.8.to 64.5 Hz were 
‘reported in the island. FTR (frequency trend relay) operation occurred 
in eastern Ontario and under-frequency relays operated in New York 
State. This operation interrupted an additional 361 MW of Ontario, 
17 MW of Niagara Mohawk and 6 MW of New York State Electric & Gas 
customer load. 3 


107 MW of Niagara Mohawk's hydro generation and 3 MW of — 
New York State Electric & Gas's hydro generation was lost. 


Further generation reduction in the island, including 
governor action, took place. Saunders and Moses - St. Lawrence GS's 
with pre-disturbance outputs of 820 MW and 850 MW respectively, were 
reduced to a very low level for a short time. Hydro Quebec generation 
radially connected to Ontario was reduced by governor action. 


The only thermal unit in the island was Ontario's Lennox GS 
#2 unit, 500 MW capacity, with a pre-disturbance output of 125 MW. 
Severe swings were observed and the unit was tripped manually [eek 
xe val AO 


As a result of the system split and generation deficiency 
in Ontario, a power change relay located at Kenora, the Ontario 
terminal of the Manitoba - Ontario tie lines, correctly operated to 
trip the ties. This operation,’ in turn, correctly -resulted sin 
tripping the Manitoba - North Dakota tie. The pre-disturbance flow 
from Manitoba was 220 MW to Ontario and 120 MW to North Dakota, 
thus an additional 340 MW deficiency to the continental grid resulted. 


eg ate 


The effective generation loss to the main continental 
grid was approximately 1590 MW, made up as follows: 


N.Y. State flow south and east at separation points 530 MW 
Ontario flow West at separation points 720 MW 
Manitoba flow to Ontario 220 MW 
Manitoba flow to North Dakota ee On My 

Total 1590 MW 


The grid frequency as recorded at Ontario's Richview 
' station dropped from 59.985 to 59.945 Hz. 


Restoration in Ontario 


The eastern Ontario - Northern New York island was 
re-synchronized to the main system via circuit H24C (Hinchinbrooke - 
Cherrywood) at 23.14 (6 min.) following an unsuccessful attempt 
With CircuLe A29C at. 2301S. Restoracion on bCneerenmaining cincuics 
followed and customer load pickup orders were issued. 


Allecircurt restoration, 250vand 115° kV, was ‘comoleted by 
23923 (iden. ) and most) of sihe customer load was urestored by this 
Lime. 


The Manitoba - North Dakota tie, Y20P, was restored by 
Manitoba at 73.12) (@ min. mand! the Ontario — Manitoba ties placed on 
loadeatezs. [Ga Cennim=)eande se Oe CLOsmine )s 


Ontario's area requirement was returned to zero at 23.16 
(8 min.) and the grid frequency had returned to 59.985 Hz 
(pre-disturbance value) at this time. 


Restoration in New York State 


Once Ontario Hydro re-established ties between the isolated 
island and the remainder of their system, Niagara Mohawk,/ at 23.14, 
closed the two 115 kV Browns Falls - Taylorville circuits re- 
establishing a connection from Northern to Central New York. At 
23aLG5, the 230 KVecireii Adirondack) -srorter lb, wassplaced in 
service re-establishing tne 2307kV. path from Northern ito Central 
New York. At 23025, thesrplatcsbires— Sand Bar hi5okW tle, to 
Vermont was also closed. By 23.29, all Niagara Mohawk switching 
stations were back to normaliwith most customer load restored. 
New York State Electric & Gas load was restored within 30 seconds 
after tripping. 
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APPENDIX 10-M 


EXAMPLES OF THE APPLICATION OF PROBABILITY THEORY 
TO RELIABILITY PROBLEMS 
et Se 


Example 1 - The Benefits of Redundancy 


A load is to be supplied by a single generator and 
a single transmission line... The line can be either a one- 
circuit line or a two-circuit line with each circuit able 
to carry the full generator output. The problem is to 
determine the reliability of the two alternatives. 


A schematic diagram of this arrangement and the 


assumed characteristics are shown on Figure 10-M-1. 
a) Single-Circuit Transmission Line 


One can consider the combination of line and generator 
as a single device. The load will only be served when both 
the generator and the line are in service hence the failure 
rate of this device will be the sum of the failure rates of 
the line and the generator (Xc =r nays = 7). The average 


repair time of the combination will be:- 


Cue Ue em uae * ig = (3.x 12 +4 x 44.7) = 30.7 hours/event. 


It must be noted that failure rates and repair times 
are obtained by taking the average of Many Similar occurrences. 
The results of the calculations must be interpreted Similarly. 
A repair time of 30.7 hours means that over the years the 
average repair time is expected to be 30.7 hours. The 
probability of not having power at the load bus:- 


os x Me 7 is 
POINTS T6072 7 eR DOSE ae = 0239 
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A better reliability index is the expected energy 
not supplied. This is the product of the above probability, 
the size of the load, and the hours in the year. In our 
example this would be 0.0239 x 100 MW x 8760 hr. = 20936 MWhrs 


per year. 


Customers are also affected by the frequency of 
interruptions. The frequency of interruptions is given 
by £ ='p/r =" .0239°x 2385.47 = 6.85/vear. 


b) Double Circuit Transmission Line 


Since the added circuit is fully redundant both circuits 
must be out of service at the same time or the generator 
must fail before the supply is interrupted. The liklihood 
of two circuits out simultaneously is lower than that for 


a Ssingle-circuit line. 


Techniques are available to compute the equivalent 
line outage rate and repair time for the 2-cct. line. 
Assuming the outages on each circuit are independent, the 
failure rate of the line is reduced from 3.0 to 0.0245/yr., 


while the average repair time becomes 6 hours. 


When this line model is combined with the generator 


model as in example l-a, the generator outage will dominate 


the picture. Comparable indices are shown in the following 
interruption table:- 


Interruption 


Expected Energy 
Frequency 


Not Supplied (MWH) 


Interruption 
Duration 


S087) nra 
44.5 hrs. 


APC OUT CaLine 20936 


2. CLlrciat Lane Taso 
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The average interruption duration, now dominated 
by the generator, has increased compared with the single 
circuit transmission line combination. On the other hand, 
the frequency of interruption is much reduced and so is 


the energy not delivered. 


The above example does not take into account all 
the factors affecting reliability, even for this simplified 


system. 


Example 2 - The Benefits of a Spare Element 


A 600 MW generator is to be connected to the power 
system by a step-up transformer. The problem is to determine 
the reliability of two alternatives:- 


a) Three single-phase transformers rated 200 MW each 


b) As above and with one spare transformer available 
which can be installed if one of the 3 single-phase 
WNstSeLedd. 

The transformer failure rate is 0.02/year, repair 


time is 8 months and installation time is 24 hours. 


The first alternative is a simple operating/non- 
operating case. The outage rate per transformer must be 
multiplied by 3 (because there are 3 transformers) to get 
the equivalent outage rate and the repair time is 8 months 
plus 1 day (for installation). It can be shown that the 
probability that the connection between the generator and 
the system will be unavailable is 0.0386. The expected 
energy not delivered for one year will be 0.0386 x 600 x 
8760 = 202881 MWhrs. 


Adding a spare transformer makes the case considerably 
more complex from a reliability point of view. Figure 10-M-2 
shows the various states which the step-up transfo.mer can 
be in. Arrows denote a transition from one state to another. 


The transition rate is indicated above the arrows. 
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Beginning in state N, the step-up transformer is 


operating and 1 spare transformer is available. Failure 

of a single-phase transformer causes the step-up transformer 
to-gqon.to state SF. Transfers to state S by repair of the 
faulty transformer or to state F by installation of the 
spare transformer are both possible. While in state F the 
failure of one of the operating single-phase transformers 
will change the step-up transformer to FF, the state with 

2 failed single-phase transformers. 

It is assumed that there is no lack of repair facilities 
or manpower to effect the repair work. Transfer from state 
FF to state SF will occur when one single-phase transformer 
is repaired. A direct transfer from FF £0 S could occume:. 
2 repair jobs were completed simultaneously. Although theo- 
retically possible, the transition rate is so low that 
neglecting this transition will not change the results. The 
above process can be considered a Markov chain process. The 
individual state probabilities are found by solving the 
transition intensity matrix equation which may be derived 
from the model shown in Figure 10-M-2. Solution of this 


equation yields the following long-term probabilities:- 


2 2 2 
Pee {2 Bs Ur + 2p, B,. (3X + n,)| /A 
2 
Poss On NaS ee 
2 eZ 
Deuce Bs /A 


ue) 
I 


SF {6 Bop, (3% + B,)| /B 


g = {6r>m,7 (GX+ a} A 


Le) 
Il 


; Poe”! 
With A = 9X Pao tee {(a, +. Jt 2) (3A 4+ yu.) (3% + p,)} 


Details of the method are explained in modern textbooks; 
see for example Reference 13. 
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Substituting values for the characteristics in the 
equations produces a value of 0.99907 for the sum of Po 
and Pay the probability that the step-up transformer 


will be available. 


The expected energy not delivered will be (1-0.99907) 
x 600 x 8760 = 4888 MWhrs per year. 


Adding the spare bank has reduced the expected energy 
not delivered by a factor of 40. 


GEN. LINE LOAD GEN. LINE LOAD 


(a) Simple generation - transmission system 
with single circuit transmission line. 


(b) Generation - transmission system with 
double circuit transmission line. 


2S = failure rate (failures per unit time) 
ig = repair time 
Cae unit capacity. 
LOAD = 100 MW 
XG = 4/year 
\7 = 3/year 
pute cies 3/year 
XG = 44.7 hours 
in = 12 hours 
nes = 12 hours 


T2 Figure 10-M-1 
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MARKOV MODEL FOR THREE SINGLE-PHASE 
TRANSFORMERS WITH ONE SPARE 


aN = failure rate (failures per unit time) 


Mr 


js = installation rate (inverse of installation time. J 


‘ 


repair rate (inverse of repair time) 


TRANSFORMER BANK OPERATING STATES:- 


(ar) spare unit available 


(*) no spare unit available, first failed unit under repair. 


TRANSFORMER BANK NON-OPERATING STATES: 
(se) one unit broken down, spare unit available. 
(s) broken down unit repaired, spare unit also available. 


(FF) spare unit broken down, first failed unit not yet repaired. 
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TYPICAL ITEMS OF COMPONENT DATA NOW BEING COLLECTED 
BY ONTARIO HYDRO 


The following is a partial listing of the detailed 
information kept concerning outages on the Bulk Power Trans- 
mission System: 


1.0 FORCED OUTAGES 
1.1 Component Identification 
1.1.1 Design Voltage Class and Operating Voltage Class 
1.1.2 Component Type Classification 
x es or cable 
- circuit breaker 
- transformer (including phase shifters) 
1.1.3 Geographical Region 
1.1.4 Property Number (line section) 


1.1.5 Operating Designation 


1.2 Date and Time 


Lao Loves Outage Time 
1.4 Type of Outage 
1.4.1 Automatic 


1.4.2 Manual - unavoidable, undeferable 
- deferable or deferred 


1.4.3 Extended - unavoidable 
- deferable 


1.7 Fault Data 
1.7.1 Phases Involved (BY-WY-BG-WG etc. ) 


- external 
- no fault 
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1.0 FORCED OUTAGES 


1.8 Reclosing Performance 

1.8.1... Line Test 

1.8.2 Lockouts 

1.8.3 Successful reclosures and type and timing 
1.9 Cause of Outage (see note #1) 


1.10 Effects of Outage, Including Effects of Associated 
Outages 


(see note #2) 
1.11 Weather 


1.12 Generation Rejection 
1.12.1 Date, Time, Location, Reason (Legitimate, Personnel, 


Communications Malfunction, Relay Malfunction) 
2.0 FORCED ASSOCIATED OUTAGES 
2.1 Component Identification 
2.2 Date and Time 
2.3 Total Outage Duration 
2.4 Cause 


3.0 SCHEDULED OUTAGES 


3.1 Component Identification 
Same as 1.1 


3.2 Date and Time 
3.3 Total Outage Time 
3.4 Requesting Department 


3.5 Reason for Outage 
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4.0 ASSOCIATED SCHEDULED OUTAGES 


4.1 Components Identification (as in 1.1) 
4,2 Date and Time 


4.3 Reason 


NOTES 


1. The following is a detailed listing of the data 


under the category "Cause of Outage". 


Equipment Initiating Component Outage 


Bus 

Breaker 

Power Transformer 

Tap Changer 

Current Transformers 

Potential Transformer 
Capacitive Voltage Transformer 
Wave Trap 

Surge Arrester 

Are Gaps 

Disconnect Switch 

Insulator 

Bushing 

Ground Switch 

Miscellaneous Station Equipment 
Line Equipment 

Cable 

Cable Pothead 

Relays 

Power Line Carrier 

Microwave System 

Supervisory Control Facilities 
Landline 


Department or Group Responsible for Equipment 


LMD 

SMD 

Forestry 
Operating 
P&C 

Foreign System 
Customer 


3A 
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NOTES (Continued) 


Nature of Defect 


Housing Failure 

Primary Winding Failure 
Tertiary Winding Failure 
Secondary Winding Failure 
Operating Mechanism Failure 
Mechanical Defect 

Oil Contamination 

Oil or Gas Leak 

Internal Explosion or Flash 
Cooling System Trouble 
Flashover 

Open Phase 

Drop Lead 

Phase Discrepancy 
Corrosion 

Overload 

Footing Failure 

Anchor Failure 

Guy Assembly Failure 
Main Support Failure 
Cross Braces Failure 
Cross Arm Failure 

Sagging 

Sleeve Failure 

Damper Failure 

Spacer Failure 

Dead End Connection Failure 
Suspension Clamp Failure 
Skywire Clamp Failure 
Galloping 

Cable Joint Failure 

Cable Sheath Failure 
Cable Pipe Failure 


Cable Jacket/Covering Failure 


Cable Bonding Failure 


Cable Cathodic Protection Failure 


Cable Pumping Plant Failure 


Compressed Air Supply Failure 


Design Problem 

Intermediate Wiring Trouble 
A.C. Power Supply 

D.C. Power Supply 
Electronic Defect 


Setting 


4A 


APPENDIX 


NOTES (Continued) 


Foreign Interference 


Ground Vehicles/Kites 
Birds, Animals 
Fallen Tree 

Tree or Bush 

Flying Debris, Fire 
Landslide, Flooding 
Sabotage, Digging 


Personnel Error 


- Interference 
- Switching 
- Procedure 


Trouble External to Components 
- Reason for Component Outage 


- Instability 
- Backup Operation 
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COMPOSITE SYSTEM RELIABILITY PROGRAMS 


A. PCAP 


The Power Technologies Incorporated Fast Contingency 
Analysis Program (PCAP) which is being developed by P.T.I. 
under contract with the Northeast Power Co-ordinating 
Council, represents one of the more recent attempts on 
the part of the industry to find a method to examine overall 
system reliability in a practical and efficient way. 


Some idea of the requirement for computational efficiency 
can be gathered from a small system with only 60 components 
(lines, generators, transformers). If the system were to be 
investigated exhaustively, that is considering every possible 
outage and combination of outages, 2 yor approximately 10 8 
situations would require evaluation. Even for modern com- 
puters this is a formidable and expensive job. Any practical 
method for assessing reliability must reduce the number of 


situations to a more manageable level, without losing signi- 
ficant accuracy. 


PCAP embodies new developments which greatly reduce the 
number of studies required to assess reliability of the 
power system. The extent of the reduction is a function of 
the system configuration and loading so that Pos Cirlicult 
to anticipate the amount of work required. 


PCAP uses a rapid direct current load flow technique 
to simulate the system conditions for each outage event 
considered. The technique greatly reduces computation time 
but does not provide any knowledge of system voltages or 
reactive requirements. PCAP is thus able to provide a 
reasonable simulation of overload problems but does not 
identify voltage problems. 


A brief description of the overall application of 
PCAP follows:- 


1. The user inputs the system electrical parameters 
(loads, generator ratings and initial loading, 
line and transformer ratings and reactances), 
the outage data for each element, a phil ge) ob 
specified outages, the number of program-chosen 
outages, and certain additional Goncrol 2nnor= 
mation. 
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2. The program performs a generation-load study 
similar to the Loss of Load calculation and 
prints the appropriate indices. 


3. The program then simulates the system under 
the condition with all the facilities in 
service. 


4. Providing there are no problems in the pre- 
ceding simulation, the program performs 
analyses to determine outages in order of 
severity. 


5. The program then considers all user-specified 
outages, one at a time, checking for load 
isolations, generation shortages, and element 
overloads. The program then considers the 
effect of outages taken two at a time. 


6. The program accumulates data concerning the 
probability and frequency with which facilities 
are overloaded or islands are isolated (generation 
alone, load and generation, or load alone) and 
tabulates the expected load not served and com- 
putes an index related to the frequency and 
magnitude of load interruptions. These are 
summarized and printed. 


Work is continuing to develop PCAP so that in the future 
it may provide a more realistic and comprehensive measure of 
system reliability. The logic and some of the concepts 
involved in the program are complex and progress is consequently 
slow, despite the considerable effort being expended. 


B. Work by Ontario Hydro Research Staff 


Ontario Hydro's Research Division is developing a 
composite system reliability program which employs a load 
flow technique wherein both the real and reactive aspects of 
the system are modelled using linear approximations. lL tiie 
work is successful it will enable consideration of voltage 
as a criterion for system failures and further extend the 
ability to perform system reliability analyses. 


